Privacy

Controller

The controller is Roman Kulesov, the operator identified in the legal notice. His address and contact details are provided there; send privacy requests to info@auvarra.com.

Auvarra is a static website without user accounts, a newsletter or a contact form. There is no backend of our own. Search terms are processed in the browser using a local search index; loading the index creates normal hosting requests. Visitor measurement with Cloudflare Web Analytics is explained below.

Legal notice · info@auvarra.com

Hosting and technical access data

The website is hosted on Cloudflare Pages (Cloudflare, Inc., USA). When pages are requested, IP addresses, timestamps, requested URLs, browser/device information and technical connection data are processed to deliver the site and prevent attacks. Cloudflare may keep technical and security logs.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in an available, secure website. Necessary hosting security measures are separate from the visitor measurement described below.

The specific hosting configuration has not yet been set up. Account-specific log retention, access permissions and the data-processing agreement must therefore be confirmed before public launch; we do not claim a fixed log period or an already concluded agreement. This notice will be completed with the confirmed details before launch.

Cloudflare Web Analytics

We use Cloudflare Web Analytics from Cloudflare, Inc., USA, to analyse page views, visits, referring pages and website performance in aggregate statistics. The purpose is to understand how our content is used and improve loading times and presentation.

A JavaScript script is loaded from static.cloudflareinsights.com. It sends information about the requested page, referring page, browser and device, and loading and performance measurements to Cloudflare. These connections also technically involve the IP address. According to Cloudflare, Web Analytics uses no cookies or localStorage for visitor measurement, no fingerprinting and no tracking of individual visitors across websites. We do not create individual user profiles from these statistics.

Where personal data is processed, we rely on Article 6(1)(f) GDPR: our legitimate interest in data-minimising measurement and improvement of our website. You can object on grounds relating to your particular situation by contacting info@auvarra.com. Browser protections or content blockers can prevent the measurement script; other content remains usable. The hosting and international-transfer information and the provider information linked below also apply to Cloudflare.

Contact by email

The info@auvarra.com mailbox uses Google Workspace (Gmail). Google processes messages and metadata to provide and secure the email service; subprocessors may be involved. Google Workspace’s data-processing and subprocessor documents are linked below. We claim no particular data region, account-specific retention period or already confirmed contractual acceptance.

If you email us, we process your email address, message, any name you provide and technical message information to respond. Please provide only necessary information. The basis is Article 6(1)(f) GDPR, or Article 6(1)(b) for a specific contractual or pre-contractual enquiry.

After completion, we delete correspondence once it is no longer needed, unless statutory retention duties or legitimate interests in defending legal claims require retention. Article 6(1)(c) GDPR applies to statutory duties. Account-specific storage and transfer terms for Google Workspace must be documented before launch.

Language preference, browser storage and search

An explicitly chosen language is stored as de or en under auvarra-language in your browser’s localStorage. It is not sent to us and remains until site data is cleared or another language is selected. It only supplies the requested language display; the basis is Section 25(2)(2) TDDDG and, where personal data is involved, Article 6(1)(f) GDPR.

You can remove the entry through your browser’s site-data settings. Language URLs work when browser storage is unavailable. On entry, browser language may be used locally to select a language. We set no tracking, marketing or analytics cookies of our own.

Product images, previews and fonts

Visible product images currently load directly from m.media-amazon.com and YouTube thumbnails from i.ytimg.com. The providers receive IP address, time and technical browser/connection data when images load, even without a player click. Lazy loading can delay requests but does not prevent transfer. We suppress the page referrer on these image requests.

The purpose is recognisable product presentation and video selection. For image delivery we rely on Article 6(1)(f) GDPR and our interest in an informative editorial website. This is not consent to additional advertising or tracking. Amazon and Google may process request data under their own privacy rules; we do not set their retention periods.

Provider information is available in the privacy links below. You can object to our processing using the contact address. DM Sans and Playfair Display font files are served locally, without a Google Fonts connection.

YouTube videos and your permission

The YouTube player loads only after your deliberate permission: the first click selects it, the second permits data transfer and playback. The preview in Additional videos is separate and loads externally beforehand. Published pages currently embed no TikTok players.

The recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with possible processing by affiliated Google companies outside the EU. We use youtube-nocookie.com in privacy-enhanced mode. This prevents neither connection data nor all further processing. Playback can involve IP address, device information, viewed videos and browser identifiers, as well as cookies or similar storage.

The basis for loading after permission is Article 6(1)(a) GDPR and, for non-essential storage/access, Section 25(1) TDDDG. Permission applies only to this player on the open page and is not persistently stored by us. Without permission, you can use other content or open the video directly on YouTube.

Use Disable video to remove the player and stop further player connections from that embed. Withdrawal applies prospectively; it does not erase data already sent or storage set by Google. Clear such site data in your browser or use Google’s privacy controls. Google determines retention and account association.

Shopping links and external websites

Shopping links lead to Amazon.de in both language versions. A click opens an external website with its own privacy notices and settings. We do not transfer order or payment details and do not handle purchases.

When you visit Amazon, it receives technical connection data and may use its own cookies. Other source links are also external references. The page language does not confirm delivery to your country; check the offer and delivery destination on Amazon.de.

Recipients and transfers outside the EU

Hosting, email and media providers may process data outside the EU/EEA, particularly in the United States, where protection and government access can differ. Transfers require a basis under Articles 44 onward GDPR, such as an applicable adequacy decision or safeguards including EU standard contractual clauses. Player consent does not universally replace this assessment.

Cloudflare and Google describe general transfer mechanisms in their provider information. Their applicability to the specific hosting account and services must be documented before publication. We claim no already verified account-specific DPF coverage or concluded standard contractual clauses. You can request information or copies of applicable safeguards from us.

Your rights

Subject to statutory conditions, you have rights of access (Article 15), rectification (16), erasure (17), restriction (18) and portability (20 GDPR). You may withdraw consent prospectively at any time (Article 7(3)), without affecting the lawfulness of earlier processing.

For processing under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21). You may object to direct marketing at any time. Send requests to the contact address above; we may verify identity where necessary.

You may complain to a supervisory authority (Article 77 GDPR), particularly where you live, work or believe an infringement occurred. The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg is responsible for our location. We carry out no automated decision-making, including profiling.

Amazon.de affiliate links

Shopping links for the 19 published products on our German and English perfume, beauty and beauty device pages contain our affiliate ID and other attribution parameters supplied by Amazon. After a click, Amazon can attribute the visit and qualifying purchases to our affiliate account and calculate a commission. Both language versions link to Amazon.de. We do not use a US affiliate account; source references are not affiliate shopping links.

We use ordinary external links and do not load an affiliate tracking script on Auvarra. Amazon’s privacy and cookie settings apply when you visit Amazon. The identifier enables attribution to fund our editorial content; our provision of these links relies on Article 6(1)(f) GDPR. Cookies and further processing at Amazon are governed by its notices and your settings there. We do not receive your order or payment details.