Grok Folders
Get folders for Grok
Back to grokfolders.com

Legal notice

Privacy Policy

How grokfolders.com handles data when you visit this website. This is an informational page: no account, no forms, no sign-up.

1. Controller

The controller responsible for data processing on this website is LUNA Consulting GmbH, Steinerner Weg 10, 97276 Margetshöchheim, Germany. Email: [email protected]. Full details are in the imprint.

2. What we process when you visit

This is a static, informational website. You can read it without registering, logging in, or submitting any personal data. There are no contact forms, comments or user accounts on this page.

If you contact us by email, we process your email address and the content of your message in order to handle your inquiry. The legal basis is Art. 6 (1)(f) GDPR, or Art. 6 (1)(b) GDPR where your inquiry relates to a contract.

3. Server log files

When you open this website, our hosting provider automatically records technical information that your browser transmits, known as server log files:

  • your IP address,
  • date and time of the request,
  • the page or file requested and the HTTP status code,
  • the referring URL, and
  • your browser type, version and operating system.

This data is processed solely to deliver the website reliably and to protect it against misuse and attacks (operation, stability, abuse detection, error analysis). It is not merged with other data and is not used to identify you personally. The legal basis is Art. 6 (1)(f) GDPR (our legitimate interest in a secure and functional website). Log files are retained as a rule for 14 days, unless longer retention is necessary in individual cases.

4. Hosting and content delivery

This website is hosted by DigitalOcean, LLC (USA), data center Frankfurt am Main, Germany. For delivery, DigitalOcean engages Cloudflare, Inc. (USA) as a sub-processor. All requests to this website are routed through it; Cloudflare processes the IP address, the address accessed and the browser identifier in doing so, and sets one technically necessary cookie to fend off automated access (__cf_bm, 30-minute lifetime, see section 5). As a delivery service, Cloudflare necessarily has access to the transmitted content to the extent required for forwarding; no content is stored there.

DigitalOcean, LLC is certified under the EU-U.S. Data Privacy Framework; transfers are based on the European Commission’s adequacy decision on the EU-U.S. DPF (Art. 45 GDPR). Should this adequacy decision cease to apply, the data processing agreement pursuant to Art. 28 GDPR provides for standard contractual clauses (Art. 46 GDPR) as a fallback. The sub-processor engaged by DigitalOcean, Cloudflare, Inc. (USA), is likewise certified under the EU-U.S. Data Privacy Framework.

5. Cookies and tracking

This website itself sets no cookies and uses no advertising or cross-site tracking. Independently of this, the delivery service through which our pages are served (see section 4) sets one technically necessary cookie on every page view to distinguish automated from human access (__cf_bm, 30-minute lifetime). Because this cookie is strictly necessary for the secure delivery of the site, no consent is required (Section 25 (2)(2) TDDDG) and no cookie banner is shown.

6. Analytics

On this website we use a self-hosted instance of the open-source analytics software umami for audience measurement. It runs on our own infrastructure; the data collected is not passed on to third parties and is not used for any other purpose.

Processed data:

  • the address accessed including any parameters (e.g., campaign identifiers such as utm_source) and the referring page (referrer); fragment identifiers (#…) are stripped,
  • date and time of access,
  • browser type and version, operating system, device category and screen resolution,
  • browser language setting, and
  • a location derived from the IP address (country, region and city). The assignment is approximate and may deviate considerably; no street-level positioning and no evaluation of GPS data takes place.

Umami itself sets no cookies and places no identifier on your device. Independently of this, the service through which our pages are delivered sets a technically necessary cookie on every page view to distinguish automated from human access (__cf_bm, 30-minute lifetime, see section 4). It is also set if you have objected to audience measurement. The IP address is processed only briefly in order to determine the country and to group related page views; it is not stored.

Purpose: audience measurement as well as needs-based design and improvement of this website. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest). Umami itself stores nothing on your device; the cookie mentioned above is technically necessary for secure delivery. Consent under Section 25 (2)(2) TDDDG is therefore not required. Retention period: 18 months; the individual records are then deleted automatically. Aggregated statistics without any personal reference may be retained beyond that.

Objection: you may object to audience measurement at any time. The switch takes effect immediately; the measurement script is then no longer loaded on this website at all.

Your objection is stored as a flag in your browser’s local storage. It therefore applies only to this browser on this device and is lost if you clear the site data. Your browser’s own signal is more durable: if it sends Do Not Track or Global Privacy Control, no measurement takes place without any further action on your part. Independently of this, you can reach us at any time at [email protected].

7. Embedded videos (YouTube)

This website embeds a video from YouTube using a two-click solution. Until you press play, the page only shows a preview image stored on our own server, and no connection to YouTube is made. Only when you actively click the play button is the video player loaded from YouTube in privacy-enhanced mode (youtube-nocookie.com). From that point on, YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with its parent Google LLC, USA) processes your IP address and device information and may set its own cookies; Google’s privacy policy applies (policies.google.com/privacy).

Your click is your consent (Art. 6 (1)(a) GDPR, Section 25 (1) TDDDG) and applies to the current page view. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers rest on the European Commission’s adequacy decision (Art. 45 GDPR).

8. External links

This page links to external websites, in particular the browser web stores and tidyfolders.com. Once you follow such a link, the privacy policy of the respective provider applies; we have no influence over their data processing.

9. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). To exercise any of these, contact us at [email protected].

10. Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0
Email: [email protected]
www.lda.bayern.de

11. Changes to this policy

We may update this privacy policy when legal requirements or this website change. The version published here always applies.