1. Data controller
Nicolas Garde, trading as Garde Ventures, Waldlehne 65, 45149 Essen, Germany. Email: info@campwiesly.de.
2. Website delivery and security
We use Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, for hosting and delivery. When you access the website, data processed includes your IP address, the time, requested URL, technical browser information and response status. This supports secure and reliable operation under Article 6(1)(f) GDPR. The contact function runs in the Frankfurt region; content is delivered through a global network. This does not guarantee processing exclusively within Europe.
Technical logs are retained only as long as needed for operation, troubleshooting and abuse prevention. Vercel retention periods depend on the service and plan used. Our contact function does not log form contents, email addresses or IP addresses.
3. Contact form and email
When you contact us, we process your name, email address, business, area of interest and any optional information you provide. Required details allow us to identify and answer your enquiry. The form cannot be submitted without them; you can alternatively send an email directly.
We process pre-contractual enquiries under Article 6(1)(b) GDPR. Other enquiries are processed based on our legitimate interest in responding under Article 6(1)(f) GDPR. There is no newsletter or automatic subscription to marketing emails.
Your message is delivered through Resend (Plus Five Five, Inc., USA) to our Google Workspace mailbox. In Europe, Google Workspace is provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. The enquiry is recorded as an email in the mailbox; this website maintains no additional prospect database. Resend processes message and recipient information for sending and delivery records. We also send a single, purely transactional acknowledgement to the email address you provide. It contains only a reference and general information, without a copy of your message or other form details. It does not subscribe you to marketing.
4. Spam protection and technical identifiers
We check a hidden form field, a signed short-lived timestamp and a computational challenge solved in your browser. No external CAPTCHA service is loaded. A short-lived network key, hashed on the server, limits repeated requests on a running server instance. It is not stored permanently. A request identifier helps prevent duplicate emails on retries. The legal basis is Article 6(1)(f) GDPR: protecting the contact channel against abuse.
5. Retention and deletion
Enquiries in the mailbox are intended to be deleted within six months after they have been fully handled, unless a contract results or legal retention obligations or the defence of legal claims require longer storage. The operator carries out deletion in the mailbox. If a contract results, the applicable statutory retention periods apply. Technical providers may have their own limited log and backup retention periods.
6. Processors and international transfers
Hosting, email delivery and the mailbox are handled by the providers named above. Processing may take place in the USA and other countries outside the EU. The contractual basis consists of the relevant data processing agreements. Where required, appropriate safeguards such as EU Standard Contractual Clauses under Article 46 GDPR or an applicable adequacy decision under Article 45 GDPR apply. Information about these services is available from Vercel, Resend and Google Cloud. You can request details and a copy of relevant safeguards from the controller.
7. Cookies, fonts and analytics
This marketing website does not itself set cookies, loads fonts and images from its own origin, and uses no marketing or visitor analytics scripts. Form state remains only in the memory of the open tab. No persistent browser storage is used for tracking. We therefore display no consent banner. Links to external websites transmit data to their operators only when opened.
8. Your rights
Subject to the applicable legal requirements, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20 GDPR). You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). Where processing is based on consent, you may withdraw it at any time with future effect. Simply contact the controller.
You may lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf, Germany.
9. No automated decisions
There is no automated decision-making with legal or similarly significant effects, and no profiling.