Legal
Privacy notice
Short version: no cookies, no analytics or advertising scripts, nothing loaded from other servers. The fit tool and fit checks run in your browser and send nothing. The server keeps a short log with a shortened IP address so we can count visits and clicks.
1. Who is responsible
The controller under the General Data Protection Regulation (GDPR) is:
Dr. Michael Niestroj
Otto-Boll-Str. 12, 79576 Weil am Rhein, Germany
E-mail: hello@embroideryfitguide.com
The same details are in the imprint.
2. Visiting the website
When you open a page, your browser sends technical data to our web server: your IP address, the address of the page (including parameters such as sub or pos), the time, the referring page, the browser's user-agent string and other headers your browser sends (such as preferred languages), plus the response status and size. The website is hosted by Cloudi NextGen S.L. (clouding.io), Ronda General Mitre 25, bajos, 08017 Barcelona, Spain.
The server writes this to an access log. Before anything is written, the IP address is shortened (IPv4 to the first three blocks, e.g. 203.0.113.0; IPv6 to the first 48 bits), so the log cannot point to a single connection. We use the log to keep the site running and secure, and to count page views and clicks on our /go/ links (for example: how many visitors who arrived from one ad clicked through to a shop). The log is deleted automatically after about 30 days (31 at most). We keep only counts, which contain no personal data.
Separately, error messages of the web server software (for example about failed encrypted connections) can contain the full IP address. They go to the server's system journal (journald), are used only to fix technical problems, and are deleted automatically after 30 days at the latest (the journal is kept in memory, so a server restart deletes it sooner).
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a working, secure website and in knowing which pages and ads are useful.
3. No cookies, no third-party scripts
This site sets no cookies and uses no analytics, advertising or social-media scripts. It loads no fonts, images or scripts from other servers. A small script on the page copies the sub parameter from the page address into our /go/ links and our links to other pages of this site. The fit tool and fit checks work entirely in your browser; what you enter is not sent to us or stored.
If you arrive from a search ad, a click identifier (gclid, gbraid or wbraid) is added to the page address. Before the log is written, we remove these from the logged address and blank them out in the logged referring page.
4. Links to shops (paid links)
When you click a link marked paid link, our server sends you on to the shop's website (currently Sewing Machines Plus, sewingmachinesplus.com). Once Sewing Machines Plus approves us, the link passes through its affiliate network, Awin. From that moment the shop and its network are responsible for your data. They may set cookies to record that you came from us, so that we receive a commission if you buy. Once Sewing Machines Plus approves us, with the click we pass on a short code for the ad and search keyword that brought you (the sub parameter) and the time of the click, so that sales can be matched to ads. The code identifies an ad, not a person. Please read their privacy notices. We receive only reports of sales and commissions, not your name or contact details.
5. E-mail
If you e-mail us, we use your address and message only to answer you (Art. 6(1)(b) and (f) GDPR) and delete them when the matter is closed, unless the law requires us to keep them. E-mail is hosted by Google Ireland Ltd. (Google Workspace) as our processor; data may be transferred to Google LLC in the US under the EU-US Data Privacy Framework and standard contractual clauses.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Because the log contains only shortened IP addresses, we usually cannot link an entry to you. Write to hello@embroideryfitguide.com.
You can complain to a data protection supervisory authority, in particular in the EU member state where you live, work or where you think the infringement happened (Art. 77 GDPR). The authority responsible for us is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart, Germany.