Privacy Policy
You can read this site without a cookie banner. A normal visit does not store anything on your device, and it does not read what is already stored there.
That is the rule in Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), and it is how I built the pages. Fonts and scripts that draw the site are stored with the site. I do not load them from Google Fonts or another public font service.
Two things are different from a plain page load. I count visits with Plausible, and only on rootsandfruit.com. If you click Book a discovery call, Google Calendar loads so you can pick a time. Both are described below.
1. Controller
The controller for personal data on this website, in the sense of Article 4(7) GDPR, is:
Roots & Fruit UG (haftungsbeschränkt)
35619 Braunfels, Germany
Email: [email protected]
I run the company. Write to that address if you want to know what I hold about you, or if you want it corrected or deleted.
2. A normal visit
Opening a page does not set a cookie. The site does not use localStorage, sessionStorage, or fingerprinting to recognize you or to build a profile.
Because a normal visit does not store information on your device or read information from it, I do not show a cookie consent banner.
3. Plausible
I use Plausible to see which pages get read. The script loads only when the address is rootsandfruit.com. A preview address does not load it.
Plausible does not set a cookie and does not follow you from site to site. I see totals, such as page views and referrers. I do not get a profile I can tie back to you.
Legal basis: Article 6(1)(f) GDPR. My legitimate interest is knowing which pages are useful, without identifying visitors. Plausible describes its own processing at plausible.io/data-policy.
4. Booking a call
The Book a discovery call button does not load Google when the page opens. The calendar frame has no address until you click.
After you click, the page loads a Google Calendar appointment schedule so you can choose a time. Google may then store cookies on your device and process the appointment under Google’s privacy policy. Closing the dialog does not remove cookies Google has already set.
Legal basis for handling the booking: Article 6(1)(b) GDPR, because you asked to arrange a call.
5. Hosting
Cloudflare delivers this website over HTTPS. To send the page, Cloudflare processes connection data such as your IP address, the time of the request, the address of the page, the referrer, and the browser you used.
I use that to deliver the site and to keep the network up. I do not use it to build a visitor profile. Legal basis: Article 6(1)(f) GDPR. Cloudflare’s own notice is at cloudflare.com/privacypolicy.
6. Search Console
I look at aggregated search data in Google Search Console. Google collects that data on its own. This site does not add a Search Console script or cookie. I receive totals, not a record of you.
Legal basis: Article 6(1)(f) GDPR.
7. Email and client work
If you email [email protected], or if you and I start working together, I keep what you send so I can reply and do the work. That can include your name, email address, the message, and billing details you choose to provide.
Legal basis: Article 6(1)(b) GDPR when the message is about a contract or a possible contract, and Article 6(1)(f) GDPR when I am answering a general question. I delete it when the conversation is finished, unless a statutory retention period still applies.
8. Your rights
You can ask for access to your personal data (Article 15 GDPR), correction of inaccurate data (Article 16), erasure (Article 17), restriction of processing (Article 18), and a portable copy where Article 20 applies. You can object to processing based on legitimate interest (Article 21). Where processing is based on consent, you can withdraw that consent with effect for the future.
You can also complain to a supervisory authority (Article 77 GDPR). That can be the authority where you live, where you work, or where you think the problem happened. For Roots & Fruit UG, the Hessian authority is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.
Write to [email protected].