Privacy policy

We take the protection of your personal data seriously. This policy explains which data we process when you visit brightspots.eu or contact us, why we do it, and which rights you have.

1. Controller

We are not required to appoint a data protection officer. For all questions about data protection, please contact us at the address above.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the website, the server automatically records technical information that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. This data is required to deliver the website securely and reliably and is not merged with other data sources.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and error-free operation of the website. We have concluded a data processing agreement with our hosting provider in accordance with Art. 28 GDPR.

3. Cookies

This website itself does not set any tracking or marketing cookies and does not use analytics tools. Technically necessary cookies may be set by WordPress, for example when you are logged in. Legal basis: § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

4. Fonts

This website uses fonts that are installed on your device or delivered from our own server. No connection to external font services is established.

5. Contact form (Typeform)

We use Typeform to receive enquiries. The provider is TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain. When the form is displayed or opened, a connection to Typeform's servers is established, and the data you enter (for example name, email address, company and your message) is processed by Typeform on our behalf. We use this data only to handle your enquiry.

Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR, based on our legitimate interest in handling enquiries efficiently. We have concluded a data processing agreement with Typeform. Further information: Typeform privacy policy.

6. Contact by email or phone

If you contact us by email or phone, we process your enquiry, including the personal data you provide, in order to handle your request. We do not pass this data on without your consent. Legal basis: Art. 6 (1) (b) GDPR for enquiries related to a contract, otherwise Art. 6 (1) (f) GDPR.

7. Storage period

We delete your data as soon as it is no longer required for the purpose for which it was collected, unless statutory retention periods apply, for example under commercial or tax law.

8. Your rights

You have the right to:

• access your personal data (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR),
• withdraw any consent you have given, with effect for the future (Art. 7 (3) GDPR).

To exercise your rights, an informal message to hello@brightspots.eu is sufficient.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

10. SSL/TLS encryption

This website uses SSL/TLS encryption to protect the transmission of your data. You can recognise an encrypted connection by "https://" in the address bar of your browser.

Status: October 2026