Privacy Policy

Last updated: 1 October 2025

This Privacy Policy explains how we process personal data when you visit our website/landing page and when you subscribe to our newsletter.

1) Controller

Sven Pfeil (sole proprietor)
trading as Stardust Solutions Lab
Weinbergstr. 15, 97877 Wertheim, Germany
Email: nvk3@stardustsl.net

For provider identification, see our Legal Notice.

2) Scope of this Policy

This Policy applies to:

visits to this website/landing page (including server logs and cookies, if any), and
newsletter subscription, delivery, and performance measurement.

If we add further services (e.g., a contact form, analytics, payment), we will update this Policy accordingly.

3) Categories of data and sources

Usage data: IP address, timestamp, request URL, referrer, user agent, HTTP status code (server logs).
Newsletter data: email address and any optional information you provide (e.g., name), subscription status, confirmation time (double opt-in), delivery status, unsubscribe status.
Interaction data (email performance): opens, clicks, bounces (aggregated statistics).

We generally collect data directly from you; usage data arises automatically when the site is accessed.

4) Purposes and legal bases

4.1 Website operation (server logs)

Purpose: Provide the website, ensure stability and security, prevent abuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

4.2 Cookies and similar technologies

Purpose: (If used) Provide essential functionality; optionally measure reach/analytics or personalize content.
Legal basis:
- Essential cookies: Art. 6(1)(f) GDPR (legitimate interests).
- Non-essential cookies/trackers: your consent (Art. 6(1)(a) GDPR; § 25(1) TTDSG).
Note: Where non-essential cookies are used, we request your consent via a banner. You can withdraw consent at any time in the banner’s settings.

4.3 Newsletter (subscription, delivery, and performance measurement)

Purpose: Send our newsletter and manage subscriptions; measure performance to improve content.
Legal basis: Your consent (Art. 6(1)(a) GDPR). Subscription uses double opt-in.
Performance measurement: Emails may include statistical measurements (opens, clicks). You can object or withdraw consent anytime (see Section 8).

5) Recipients and processors

We use service providers under Art. 28 GDPR (data processing agreements):

Email service provider (newsletter): MailerLite – for sending and managing newsletters and related metrics. MailerLite may use sub-processors.
Hosting provider – for website hosting and server logs.

These providers process data only on our documented instructions and are contractually bound to confidentiality and security.

6) International data transfers

If our service providers or their sub-processors process data outside the EU/EEA, we ensure an adequate level of protection, typically via EU Standard Contractual Clauses (SCCs) and supplementary measures where required. Copies of the relevant safeguards can be requested (subject to redactions for confidentiality).

7) Storage periods

Server logs: Typically deleted after a short period (e.g., 7–30 days), unless needed longer for security or incident analysis.
Newsletter data: Stored until you withdraw consent/unsubscribe. After unsubscribing, we may retain minimal data (e.g., email address in a suppression list and consent records) for the purpose of preventing future mailings and documenting compliance within statutory limitation periods.

8) Your rights

You have the following rights under the GDPR (subject to legal conditions):

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21).
Withdraw consent at any time with effect for the future (Art. 7(3)).
Lodge a complaint with a supervisory authority, in particular at your place of residence or the place of the alleged infringement.

To exercise your rights, contact us at nvk3@stardustsl.net.

9) How to subscribe/unsubscribe (newsletter)

Subscribe: Enter your email address and confirm via the link we send (double opt-in).
Unsubscribe / withdraw consent: Use the unsubscribe link included in every email or email us at nvk3@stardustsl.net. Unsubscribing stops future newsletters; metrics collection is stopped as well.

10) Obligation to provide data

There is no legal or contractual obligation to provide data. However, without your email address we cannot send you the newsletter; without usage data the website cannot be delivered reliably and securely.

11) Security

We implement appropriate technical and organizational measures to protect personal data, taking into account the state of the art, costs, nature, scope, context, and purposes of processing, as well as the risks to your rights and freedoms.

12) Children’s data

Our services are intended for adults. We do not knowingly process personal data of children without appropriate parental consent according to applicable law.

13) Changes to this Policy

We may update this Privacy Policy to reflect changes in our processing or legal requirements. The current version is indicated by the “Last updated” date at the top.

Annex: Newsletter-specific notice (concise)

Controller: Sven Pfeil, Stardust Solutions Lab, Weinbergstr. 15, 97877 Wertheim, Germany, nvk3@stardustsl.net
Purpose & legal basis: Send newsletters based on your consent (Art. 6(1)(a) GDPR); double opt-in used.
Processor: MailerLite under DPA; may use sub-processors; possible extra-EEA transfers with SCCs.
Performance measurement: Opens/clicks statistics to improve content; you can object or withdraw consent at any time.
Storage: Until you unsubscribe; then minimal suppression data and consent logs retained for compliance.
Withdrawal/Unsubscribe: Via link in every email or email to nvk3@stardustsl.net.
Rights: Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.