Privacy Policy

Controller

The controller responsible for data processing on this website is:

Oleksandr Uhliar
Odenthaler Straße 58
51465 Bergisch Gladbach
Germany

Email: info@echtloft.de

Purpose of this website

This website is a personal author and reference hub. Personal data are processed only where necessary for the technical operation and security of the website or for handling professional enquiries and communications.

No automated decision-making or profiling is carried out through this website.

Hosting and server log files

This website is hosted by:

netcup GmbH
Emmy-Noether-Straße 10
76131 Karlsruhe
Germany

When this website is accessed, the hosting provider may automatically process technical access data in server log files. These data may include:

• IP address of the accessing device
• date and time of access
• requested page or file
• amount of data transferred
• browser type and browser version
• operating system
• referrer URL
• HTTP status code

These data are processed to provide the website securely and reliably, to identify technical faults, and to detect or prevent misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and technically functional operation of the website.

Server log data are retained for the period technically specified by the hosting provider and are then deleted unless a security incident, statutory obligation or other legitimate reason requires longer retention.

Where required, processing by the hosting provider is governed by a data processing agreement under Article 28 GDPR.

Contact by email

When you contact Oleksandr Uhliar by email, the data contained in your message are processed for the purpose of handling and responding to your enquiry.

These data may include:

• your name
• your email address
• the content of your message
• documents and attachments
• technical communication data

If your enquiry concerns steps prior to entering into a contract or the performance of a contract, the legal basis is Article 6(1)(b) GDPR.

In other cases, processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in handling professional enquiries and maintaining traceable communication.

The data are deleted when the enquiry has been fully resolved and no statutory retention obligation or legitimate reason for continued storage remains.

Contact through WhatsApp

The contact page contains a link to the external communication service WhatsApp. Merely visiting this website does not automatically establish a connection to WhatsApp through that link.

A connection to WhatsApp is established only when you actively open the link or send a WhatsApp message. You then use an external service, whose provider processes data under its own privacy terms.

Communication through WhatsApp may involve the processing of:

• your telephone number
• your profile name and profile information
• message content
• documents, photographs and other files
• technical communication data and metadata

Processing by Oleksandr Uhliar is based on Article 6(1)(b) GDPR where communication concerns contractual or pre-contractual matters. In other cases, processing is based on Article 6(1)(f) GDPR for professional communication and the handling of enquiries.

Data may also be processed by the provider of WhatsApp outside the European Economic Area. The external provider is responsible for its own processing activities and applicable transfer mechanisms.

External links

This website contains ordinary links to external websites and profiles, including EchtLoft, Framero, SCLASS, LinkedIn, Medium, Substack and other external resources.

No connection to those providers is normally established merely by displaying a standard text link. A connection is established when you actively open the external link.

Data processing on the destination website is governed by the privacy policy of the respective external provider.

Cookies and local storage technologies

This website does not use cookies for advertising, behavioural analysis or user profiling.

Technically necessary cookies or comparable storage technologies may be used where required for the operation, security, presentation or administration of the website.

Where access to or storage of information on a user's device is strictly necessary, it is carried out under Section 25(2) of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG).

Any associated processing of personal data is based, where applicable, on Article 6(1)(f) GDPR.

Analytics and marketing services

According to the current technical configuration of this website, no analytics or marketing services such as Google Analytics, Google Ads conversion tracking or Meta Pixel are used.

If such services are introduced in the future, this Privacy Policy will be updated and consent will be requested where legally required.

Fonts and externally embedded content

According to the current technical configuration, this website does not automatically load externally hosted fonts, maps, videos, social-media plugins or comparable embedded content from third parties.

If externally hosted content is introduced in the future, this Privacy Policy will be updated and prior consent will be obtained where legally required.

Storage period

Personal data are stored only for as long as necessary for the purpose for which they were collected.

Data may be retained for a longer period where statutory retention obligations apply or where storage is required for the establishment, exercise or defence of legal claims.

Recipients of personal data

Personal data may be disclosed to technical service providers only where necessary for the operation of the website or the handling of communications.

Relevant categories of recipients may include:

• hosting providers
• email providers
• communication service providers
• IT and security service providers

Data are otherwise disclosed only where required by law, necessary for handling your enquiry, or permitted by another legal basis.

Your rights

Subject to the applicable legal requirements, you have the following rights:

• right of access under Article 15 GDPR
• right to rectification under Article 16 GDPR
• right to erasure under Article 17 GDPR
• right to restriction of processing under Article 18 GDPR
• right to data portability under Article 20 GDPR, where its legal requirements are met
• right to object under Article 21 GDPR

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to object

Where personal data are processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.

Processing will then cease unless compelling legitimate grounds for the processing override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority responsible for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Düsseldorf
Germany

You may also contact another competent data protection authority.

Data security

This website uses an encrypted HTTPS connection. This helps protect transmitted data against unauthorised access during transmission.

However, complete security of data transmitted over the internet cannot be guaranteed.

Changes to this Privacy Policy

This Privacy Policy may be updated if the technical functions of the website, the service providers used, or the applicable legal requirements change.

Last updated: August 2026