Privacy policy
In short: this website sets no cookies of its own and uses no analytics or tracking services. Fonts and images are served by this website itself. Only the spam protection in the contact form (Cloudflare Turnstile) is loaded from Cloudflare. This is a translation of our Datenschutzerklärung; the German version is the binding one.
1. Controller
BuraApps, owner: Laszlo-Norbert BuraMaria-von-Ahlefeldt-Straße 13, 93055 Regensburg, Germany
Email: hello@buraapps.com
2. Hosting and server logs
This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open the website, technically necessary data is processed, in particular your IP address, the date and time of the request, the page requested, the amount of data transferred, and information about your browser and operating system. This is needed to deliver the page and to protect it from attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is operating the website securely and reliably. Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). We have a data processing agreement with Cloudflare. More information is in Cloudflare's privacy policy.
3. Contact form
If you write to us through the contact form, we process the details you enter: name, company (optional), email address, phone number (optional) and your message. We use them only to answer your request.
The legal basis is Art. 6(1)(b) GDPR if your request aims at a contract with us, and your consent under Art. 6(1)(a) GDPR in all other cases. You can withdraw your consent at any time by emailing hello@buraapps.com.
How the submission works: the form is sent to a program on Cloudflare's servers (Cloudflare Workers). It checks the details, does not store them, and forwards them to us by email. For sending the email we use Resend (see section 4). The message arrives in our iCloud mailbox (see section 5).
We delete your request once it is resolved and no statutory retention duty applies. If your request leads to an order, we keep the related correspondence for as long as commercial and tax law requires (up to 10 years).
4. Email delivery through Resend
Messages from the contact form are delivered to us through the email service Resend (Resend, Inc., USA). Resend processes the content of the message and your contact details. We use the Ireland (EU) server region; processing in the USA cannot be ruled out. Resend is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). We have a data processing agreement with Resend. The legal basis is the same as in section 3.
5. Contact by email
If you email us directly, we process the sender, content and time to answer your request. Our mailbox runs on iCloud Mail (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). Legal basis and deletion as in section 3.
6. Spam protection with Cloudflare Turnstile
To protect the contact form from automated spam, we use Cloudflare Turnstile. Turnstile is loaded only on the home page with the contact form. It processes, among other things, your IP address and technical characteristics of your browser and device to tell people from programs. For this, Turnstile may store or read technically necessary information in your browser.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against abuse and spam. Storing and reading information in your browser is strictly necessary under § 25(2) no. 2 TDDDG for the service you requested (sending the form) to work. For the transfer to the USA, see section 2. More in the Turnstile privacy notice.
7. Your rights
You have the right to:
- access the data stored about you (Art. 15 GDPR)
- have incorrect data corrected (Art. 16 GDPR)
- have your data erased (Art. 17 GDPR)
- restrict processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise them, an email to hello@buraapps.com is enough. You can also complain to a data protection authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
8. Changes
We update this policy when the website or the law changes.