Privacy policy
1. Privacy at a glance
Protecting your personal data is important to us. Personal data means any information that can be used to identify you personally.
This privacy policy explains what personal data is processed when you visit this website, why it is processed, and what rights you have.
2. Data controller
The person responsible for processing data on this website is:
Moritz Schütte
trading as DigitalArts38
38302 Wolfenbüttel
Germany
Email: info[at]digitalarts38.de
3. Hosting and server logs
This website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabeur
Germany
When you visit this website, your browser automatically sends technical information to our hosting provider's server. This may include:
- the IP address of the device accessing the website,
- the date and time of access,
- the page or file requested,
- the amount of data transferred,
- the browser and browser version used,
- the operating system used,
- the referring URL, if transmitted,
- the HTTP status code of the server response.
Processing this data is necessary to deliver the website and maintain its stability and security.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest is to provide a secure, reliable, and technically functioning website.
Server log data is deleted after 8 weeks, unless longer retention is necessary to investigate or prevent a specific security incident.
The recipient of this data is the hosting provider named above. Where the provider processes data on our behalf, this is governed by a data processing agreement under Article 28 of the GDPR.
No personal data is transferred outside the European Union or the European Economic Area as part of the hosting service.
4. Session storage for the solution vault
The solution vault for the letter challenge uses a multi-step unlocking process. Once you complete it, the website saves the following entry in your browser's session storage:
da38-solutions-unlocked = true
This entry is used only to keep the solution area unlocked during the current browser session. It is not used for analytics, advertising, profiling, or recognizing you across sessions.
The entry is stored only after you complete the unlocking process yourself. It is deleted at the end of the browser session, or you can remove it immediately using “Lock the vault again.”
Access to session storage is technically necessary to provide the solution vault feature you have expressly requested. The legal basis is Section 25(2), No. 2 of the German TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) of the GDPR.
5. Cookies and tracking
This website does not set cookies itself.
No analytics, advertising, or tracking services are used. In particular, Google Analytics, Meta Pixel, and similar technologies are not integrated.
Images, stylesheets, and JavaScript files are loaded directly from our own web server. No external fonts or embedded third-party content are used.
6. External links to Amazon
This website includes links to Amazon product pages. These are ordinary external links. Simply visiting our website does not transfer any data to Amazon.
When you click one of these links, you leave our website and are redirected to Amazon. Technical data, including your IP address, may then be sent to the operator of the destination website.
The operator of the Amazon website you visit is responsible for any subsequent processing of personal data. The privacy policy of that website applies.
7. Contact by email
If you contact us by email, we process the information you send us. This may include your name, email address, message, and any other information you choose to provide.
We process this data to respond to your inquiry. If your inquiry relates to a contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) of the GDPR. In other cases, the legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest is to handle incoming inquiries appropriately.
The data you provide is deleted once your inquiry has been fully handled, unless statutory retention requirements or other legitimate reasons require us to retain it longer.
8. Your rights
Subject to the applicable legal requirements, you have the following rights:
- access to your stored personal data,
- correction of inaccurate or incomplete data,
- erasure of your personal data,
- restriction of processing,
- data portability,
- objection to certain types of processing,
- withdrawal of consent at any time, with effect for the future.
To exercise your rights, send a message to the email address listed under “Data controller.” No special form is required.
9. Right to object
If your personal data is processed under Article 6(1)(f) of the GDPR, you may object to the processing at any time on grounds relating to your particular situation.
Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for doing so, or processing is necessary for the establishment, exercise, or defense of legal claims.
10. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
In particular, you may contact the supervisory authority responsible for your place of residence, workplace, or the location of the data controller.
11. Automated decisions
No automated decision-making, including profiling as defined in Article 22 of the GDPR, takes place.
12. Updates to this privacy policy
This privacy policy is dated August 2026.
Changes to the website, new features, or changes in legal requirements may make it necessary to update this privacy policy.