Privacy policy

Last updated: October 2026. This is a translation. The German Datenschutzerklärung is the binding version.

1. Controller

Raul Bogdan
Burgsalacher Str. 12
90449 Nürnberg
Deutschland
Email: hello@hellocharlie.de

2. In short

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties. Personal data is only processed when you visit the website (technically necessary access data) and when you contact us through the form or by email.

3. Hosting and access data

The website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit the website, Netlify automatically processes data your browser sends: IP address, date and time of access, the page requested, the previous page, and your browser and operating system.

The purpose is to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is error-free and secure operation. A data processing agreement is in place with Netlify.

Netlify is certified under the EU-US Data Privacy Framework (Art. 45 GDPR) and also uses the European Commission's Standard Contractual Clauses (Art. 46 GDPR). More information: Netlify's privacy policy.

4. Contact form

When you use the form, we process what you enter: name, company, email address, website or profile link, the area you chose and your message. We use it to handle your request and prepare your audit.

The legal basis is Art. 6(1)(b) GDPR, as the processing takes place at your request before a possible contract. The data is sent through Netlify's form service, stored there and forwarded to our mailbox by email.

We delete your request once it has been fully handled, at the latest five working days afterwards. If the request leads to an assignment, we keep the data for as long as the assignment and statutory retention duties require.

5. Contact by email

When you email us, we process your email address and the content of your message in order to reply. The legal basis is Art. 6(1)(b) or (f) GDPR. Our mailbox is provided by GoDaddy; data may be transferred to the USA in the process. More information: GoDaddy's privacy policy. Deletion follows the same rule as in section 4.

6. Fonts

The fonts on this website are stored locally on our server. No connection to Google or any other font provider is made when you visit.

7. Links to LinkedIn and Instagram

The LinkedIn and Instagram icons are plain links. No data is sent to these networks unless you click them. After you click, the privacy policy of that network applies.

8. Your rights

You have the right to:

• access the data stored about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

An email to hello@hellocharlie.de is enough. You can also complain to a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.