Unscroll & Create
Privacy
Controller
Guy Malachi
Unscroll & Create
Hafenstr. 64, Haus 2
48153 Münster
Germany
Email: hello@unscrollandcreate.com
What this site is
These pages introduce Unscroll & Create. There is no account and no checkout. We do not use Google Analytics, a Meta pixel, or marketing cookies. Optional measurement with Umami starts only after you agree. Fredoka and Rubik are delivered with the site, so your browser does not call Google for the fonts.
Hosting and server logs
The site is served by Vercel Inc. (USA). A visit can technically include an IP address, date and time, the address you opened, the referrer, and a browser string, so the page can be delivered and kept secure.
The legal basis is Art. 6 (1) (f) GDPR: a stable and secure service. The host deletes logs on its usual short cycle. A transfer to the USA relies on appropriate safeguards, in particular the EU-US Data Privacy Framework where the provider is certified, and standard contractual clauses. Details are in Vercel’s privacy notice.
Measurement with Umami
If you agree, we load the script of the open-source tool Umami. It is built without cookies and without an advertising profile. The script is not loaded until you choose “Allow statistics”. Reject is the default. If the server has no Umami address configured, accepting still sends nothing.
What is measured after you agree:
- the page you open and its title
- referrer, browser language, screen size, and device type
- named clicks on offers, such as the checklist, the Medien-Kompass, or an email button — not your name, not your email address, and not the text of a message
The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. We do not rely on legitimate interest for this measurement. The connection to the statistics server includes an IP address, as any web request does. It is not used for advertising and it is not sold. Umami is not built to keep a personal profile.
Your yes or no stays in this browser only (localStorage, key “uc-consent”). That is not a cookie and it is not sent to our server. You can withdraw consent for the future from Cookie settings in the footer or the button on this page. Withdrawing reloads the page and removes the script.
Aggregated visits stay in the Umami database we operate until we delete them. There is no fixed statutory period for that. A visit is not tied to your name, so we usually cannot match one visit to one person. Guy Malachi remains the controller. Whoever hosts the Umami server is a processor under Art. 28 GDPR once that instance is running. The website itself is delivered by Vercel, as described above. We do not sell data.
If you write to hello@unscrollandcreate.com, we process your address, your name if you give it, and the message, so we can reply. The basis is Art. 6 (1) (b) GDPR when you ask about an offer, otherwise Art. 6 (1) (f) GDPR. We keep the thread while the conversation is open and delete it afterwards, unless the law requires us to keep it.
Checklist and Medien-Kompass interest
The checklist link (https://takethestepv2.systeme.io/62dd4c05) and the Medien-Kompass interest link (takethestepv2.systeme.io) open pages that currently run on systeme.io. Data such as a name and email is collected only if you submit a form there.
Guy Malachi stays the controller for enquiries that reach us. systeme.io provides the forms and processes the entries under its own terms or on our behalf. See the systeme.io privacy notice. The basis for handling your enquiry is Art. 6 (1) (b) GDPR, and Art. 6 (1) (a) GDPR where the checklist asks for consent.
Your rights
You can ask the controller for:
- access under Art. 15 GDPR
- correction under Art. 16 GDPR
- erasure under Art. 17 GDPR
- restriction under Art. 18 GDPR
- portability under Art. 20 GDPR
- an objection under Art. 21 GDPR to processing based on Art. 6 (1) (f) GDPR
- withdrawal of consent for the future, where we rely on consent
You may also lodge a complaint with a supervisory authority.
Supervisory authority
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
Phone: 0211 38424-0
Email: poststelle@ldi.nrw.de
www.ldi.nrw.de
Children, profiles, automated decisions
The site speaks to parents and clients. We do not build profiles of children here. There is no automated decision-making, including profiling.