Privacy Policy | Phantom Creator

This page is an informational translation of the legally authoritative German original. If the versions differ or a question of interpretation arises, the German text applies.

1. Controller

The controller within the meaning of the General Data Protection Regulation is:

Roman Zhuchenko c/o Block Services Stuttgarter Str. 106 70736 Fellbach Germany

Email: kontakt@phantom-creator.com

2. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and delivered through its content delivery and security network. When the website is accessed, Cloudflare processes technical access data, including IP addresses, to deliver the content and ensure security and stability.

The legal basis is Article 6(1)(f) GDPR, namely the legitimate interest in secure and efficient website delivery. Data may be transferred to the United States. Cloudflare relies on the EU Standard Contractual Clauses and participates in the EU-US Data Privacy Framework. A data processing agreement under Article 28 GDPR is in place with Cloudflare.

3. Server logs

When the website is accessed, Cloudflare automatically processes technical access data, in particular:

browser type and version
operating system
referrer URL
date and time of access
IP address
requested URL and technical security information

I do not maintain my own server log files. Cloudflare processes this data for delivery, technical stability and protection against abusive access. The legal basis is Article 6(1)(f) GDPR. Retention depends on the Cloudflare function used, account configuration and legal obligations. Data is deleted or anonymised when it is no longer required for these purposes.

4. Contact by email and contact form

If you contact me by email or use the contact form, I process your details, including your name, email address, company information and message, to handle your request. The legal basis is Article 6(1)(b) GDPR for steps prior to or performance of a contract, or Article 6(1)(f) GDPR for the legitimate interest in responding to your request. Data is deleted when it is no longer required for the purpose, unless statutory retention duties apply.

SMTP2GO, a service of Sand Dune Mail Ltd., is used as a processor for technical email delivery. Form data is transmitted to my inbox through SMTP2GO’s European API endpoint. Further information is available in the SMTP2GO Privacy Policy.

This website contains links to external social networks such as Instagram. No content from these networks is embedded and no data is transferred to them until you actively follow a link. The privacy rules of the respective provider then apply, for example those of Meta Platforms Ireland Ltd.

This policy also applies to my profiles on Instagram and Threads, operated by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, YouTube, operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and TikTok, operated by TikTok Technology Ltd., 10 Earlsfort Terrace, Dublin 2, Ireland.

When you visit one of these profiles, the platform operator processes personal data such as your IP address and usage behaviour under its own responsibility. For certain processing, including the creation of reach statistics, joint controllership under Article 26 GDPR may apply. I have only limited influence on this processing. Data may be transferred to third countries, especially the USA.

The profiles are used on the basis of Article 6(1)(f) GDPR, namely the legitimate interest in effective information and communication. You may exercise your data subject rights against me or the relevant platform operator. Details are provided in the policies of Instagram/Meta, YouTube/Google and TikTok.

7. YouTube videos

Videos offered on this website may be hosted by YouTube, operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Merely opening the website or the privacy notice does not transfer data to YouTube. Preview images are loaded locally from my server, not from Google.

A first click on a video card opens only a locally hosted preview and does not transfer data to YouTube. The YouTube player is loaded in enhanced privacy mode from youtube-nocookie.com only after you choose “Consent & load”. Data, in particular your IP address and device and browser information, is then sent to YouTube or Google and may be transferred to the USA. I have no control over this processing.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw consent for the future by closing the video and not loading it again. Further information is available in Google’s privacy policy.

8. No own cookies or tracking

Apart from the functions described above, this website sets no own cookies and uses no analytics, tracking, advertising or marketing technology. Fonts are hosted locally, so no IP address is sent to Google Fonts.

In certain security situations, Cloudflare may set cookies that are technically necessary. Where strictly necessary for operation and security, these do not require consent under Section 25(2)(2) TDDDG. With the current technical configuration, a general cookie banner is therefore not required.

9. Your rights

Within the limits of applicable law, you have the right to:

access your data under Article 15 GDPR
rectify inaccurate data under Article 16 GDPR
erase your data under Article 17 GDPR
restrict processing under Article 18 GDPR
data portability under Article 20 GDPR
object to processing under Article 21 GDPR
withdraw consent for the future under Article 7(3) GDPR

To exercise these rights, send an email to the address above. You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The authority generally responsible for me is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. You may also contact another supervisory authority competent under Article 77 GDPR.

Last updated: August 2026