This English version is provided for clarity. The German version is authoritative.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Ricardo Giuseppe Mier Castiglione
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen, Germany
Email: contact@cedra-os.com
Website: https://cedra-os.com/
Legal notice: https://cedra-os.com/en/impressum
Details, legal bases, recipients and retention periods are explained below.
Provider
Netlify, Inc.
101 2nd Street
San Francisco, CA 94105
USA
When the website is accessed, Netlify processes connection and log data that are technically required. These may include the IP address, date and time of access, requested URL, volume of data transferred, HTTP status code, referrer, and browser and device information. The processing is necessary to deliver the website and provide a stable and secure service.
Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in providing this website securely, reliably and continuously.
Retention: Technical log data are retained according to their necessity for operation and security and Netlify’s contractual and statutory requirements. The controller does not use these data to create user profiles.
Processing agreement and transfers to the USA: Netlify’s data processing agreement is incorporated into its terms. Netlify states that it is certified under the EU-US Data Privacy Framework and also uses the European Commission’s Standard Contractual Clauses. Further information: Netlify Privacy Statement and Data Processing Agreement.
This website itself does not set cookies. If you choose light or dark mode, this setting is stored in your browser’s local storage under the key “cedra-theme”. The setting remains on your device, is not transmitted to the controller and is not used for analytics.
The storage is used only to restore the display option you explicitly selected on a later visit. The legal basis under German law is § 25 (2) no. 2 TDDDG. This function does not require consent or a cookie banner.
You can use the contact form to send a message to the controller. The submission is processed by Netlify Forms and stored in the controller’s Netlify account. Netlify also sends a notification about the submission to the controller’s Proton Mail inbox.
The following data are processed:
Your name and email address are optional. The form cannot technically be submitted without a message. Without an email address, the controller can read the message but cannot reply.
Purpose and legal basis: The data are received and processed solely to read the message and, where possible, reply to it. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in open communication about Cedra and in handling incoming comments, questions and ideas.
Spam protection: The form uses an invisible honeypot field. No external captcha service such as Google reCAPTCHA is embedded.
Recipients: Netlify, Inc. processes and stores the form submission. The submission or a notification about it is sent to Proton Mail, as described in the next section.
Retention: Submissions are deleted from both the Netlify account and the Proton Mail inbox no later than six months after the enquiry has been fully dealt with. They are retained longer only where required by law or necessary to establish, exercise or defend legal claims.
The controller uses Proton Mail for the address contact@cedra-os.com. This applies to emails sent directly and to notifications from the contact form.
Provider
Proton AG
Route de la Galaise 32
1228 Plan-les-Ouates
Switzerland
Email communication involves the processing of the sender and recipient addresses, timestamps, subject line, message text, attachments and other technical metadata. Proton states that Proton Mail data are stored in encrypted form on servers in Switzerland, Germany or Norway.
Purpose and legal basis: The processing is carried out to receive, handle and reply to the message. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in secure and reliable communication.
Processing agreement and transfer to Switzerland: Where Proton processes personal data on the controller’s behalf, Proton’s Data Processing Agreement applies. The European Commission recognises Switzerland as providing an adequate level of data protection under Art. 45 GDPR. Further information: Proton Privacy Policy, Proton Mail Privacy Policy and Data Processing Agreement.
Retention: Messages are deleted no later than six months after they have been fully dealt with, unless they must be retained longer to comply with a legal obligation or to establish, exercise or defend legal claims.
The “Jost” font and all audio files are served directly through this website’s hosting. No external font or streaming services are embedded. Connection data generated when these files are loaded are processed as part of the hosting described in section 3.
This website does not use analytics, advertising or social-media tracking services and does not embed social-media plugins. External links are accessed only if you choose to click them.
The website is provided over an encrypted HTTPS connection. This protects transmitted data against unauthorised access in transit in accordance with the current state of technology. However, completely risk-free data transmission over the internet cannot be guaranteed.
Where the statutory conditions are met, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). If any future processing is based on consent, you may withdraw that consent at any time with effect for the future.
Objection: You may object, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR. The processing will then stop unless compelling legitimate grounds or legal claims require otherwise.
To exercise your rights, send an email to contact@cedra-os.com.
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the authority responsible for your habitual residence, place of work or the place of the alleged infringement. A list of the German supervisory authorities is available from the German Data Protection Conference.
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
This privacy notice is dated 28 July 2026. It will be updated if the website, the services used or the legal requirements change. The current version is available at https://cedra-os.com/en/datenschutz.