Privacy Policy

1. Controller

Arnela Halilovic

Gehspitz 8, 65760 Eschborn

Email: zijad530@gmail.com

2. Hosting and server log files

This website is hosted by Lovable Labs Incorporated and delivered via the infrastructure and content delivery network of the service provider Cloudflare, Inc. When the website is accessed, the hosting provider automatically collects so-called server log files transmitted by your browser, including: IP address, date and time of the request, the URL requested, and user agent (browser and device information).

This processing takes place to ensure a secure and reliable operation of the website, based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The log files are automatically deleted after a short period, typically within a few days to weeks.

3. Database (Lovable Cloud)

For the technical provision of certain features, in particular to store messages received via the contact form, we use the database 'Lovable Cloud'. Data stored there is used solely to process your request and is not shared with third parties unless necessary to respond.

4. Contact form

When you contact us via the contact form, we collect the data you provide, in particular name, email address, topic and message text. This processing serves to handle and respond to your inquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or inquiries related to our products) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Your data will be deleted as soon as it is no longer required for the purpose for which it was collected, and at the latest after six months.

5. Sending emails via Resend

To send emails, such as replies to contact inquiries, we use the service Resend, Inc., based in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework or on Standard Contractual Clauses (SCCs) of the European Commission, where no adequacy decision applies.

6. Shop and checkout via Shopify

To operate our online shop, we use the platform of Shopify International Ltd., based in Ireland. The shopping cart and checkout process are fully handled by Shopify. Data required to fulfil the contract (e.g. name, delivery address, payment data) is transmitted to Shopify and processed there on the basis of Art. 6(1)(b) GDPR.

Payments are processed via the payment providers offered at checkout (e.g. credit card, PayPal). Details on data processing by Shopify can be found in Shopify's own privacy policy.

7. Fonts

We use self-hosted fonts (web fonts loaded locally). There is no connection to Google Fonts or other external font servers, so no data is transmitted to third parties when fonts are loaded.

8. No analytics or marketing tools

We do not use analytics tools, marketing cookies, or tracking. No user profiles are created.

9. Local storage (localStorage)

Our website stores certain information in your browser's local storage (localStorage). These entries are technically necessary or serve exclusively functional purposes within the meaning of § 25(2) No. 2 TDDDG and therefore do not require separate consent. These are:

• smjesko-language — the selected site language
• smjesko-privacy-notice — whether the privacy notice has already been dismissed
• cart storage — the contents of your shopping basket
• smjesko-games-muted — whether sound in the games is muted
• smjesko-home-tip-seen — whether a home-screen hint has already been shown
• smjesko-pairs-best, smjesko-run-best, smjesko-cevapi-best, smjesko-cevapi-tutorial, smjesko-dive-best, smjesko-dive-hints, smjesko-dzezva-stars, smjesko-whos-best — high scores and progress in our games
• smjesko-contact-log, smjesko-contact-id — technical spam protection (rate limiting) for the contact form

10. Social media

Our website contains plain links to our Facebook and Instagram profiles. These are links only, not embedded social media plugins. No data is transmitted to the respective providers unless you actively click the link.

11. Games and children's data

The games offered on our website do not collect personal data from children. Scores and progress are stored exclusively on the local device and are not transmitted to us or any third party.

12. Your rights

As a data subject, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Art. 21 GDPR)
• right to withdraw consent with future effect (Art. 7(3) GDPR)
• right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular: the Hesse Commissioner for Data Protection and Freedom of Information, Wiesbaden