Privacy Policy
Information according to GDPR Art. 13/14
Controller
Contact form
If you use the contact form , your details (name, email address, message content) are processed to handle your enquiry.
The data is transmitted by email to the controller and is not stored in a database. Your IP address is processed temporarily in server memory for spam protection and is not persisted.
Recipient: Email inbox of the controller. The email delivery provider Scaleway acts as a processor according to Art. 28 GDPR.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures at the request of the data subject).
Retention: Until your enquiry has been fully processed.
Review flow (LinkedIn sign-in and feedback form)
When you follow a personal review invitation link to clean.dev, you may optionally sign in with LinkedIn via OAuth 2.0. LinkedIn will share your display name, email address, and a unique LinkedIn profile identifier with this application. LinkedIn session data is not written to the application database.
Whether or not you use LinkedIn, you fill in a form with your name, email address, an optional role, your relationship to the project, and your written feedback. Explicit consent is required before the form can be submitted.
On submission, all form data and any LinkedIn identity are forwarded immediately by email to the controller. Nothing is written to the application database.
Recipient: Email inbox of the controller. The email delivery provider Scaleway acts as a processor according to Art. 28 GDPR.
Legal bases: Art. 6 para. 1 lit. a GDPR (your explicit consent to testimonial use of your name and feedback); Art. 6 para. 1 lit. f GDPR (legitimate interest in confirming reviewer identity via LinkedIn).
Retention: Submission data is forwarded immediately and is not retained by the application. The controller's email inbox retains the received message subject to standard email retention practices.
LinkedIn identity verification is handled by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn processes your data according to their own privacy policy.
Hosting & server logs
This website is hosted on Hetzner.
Whenever a page is accessed, the server log automatically stores the following data: IP address, date and time, requested URL, HTTP status code, amount of data transferred, browser, and operating system.
This data is required for the secure operation of the website and is deleted automatically after 7 days.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest: security and abuse prevention).
Your rights (Art. 15–22 GDPR)
You have the following rights in relation to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise your rights, please contact: info@clean.dev
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR). The competent authority for Bavaria is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Status: April 2026. For information about the controller and further legal details, see the Imprint.