YOUR DATA.YOUR RIGHTS.

Who is responsible?

The controller responsible for processing personal data through this website is:

Damir Masic
DAMMA.ONLINE
P.O.BOX 4131
40645 Meerbusch
Germany

Email: info@damma.online

Hosting and technical operation.

DAMMA.ONLINE is operated using Squarespace. When the website is accessed, technical information may be processed, including IP address, browser information, device information, date and time of access and requested pages.

This processing is necessary for the secure and reliable operation of the website.

The legal basis for technically necessary processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of DAMMA.ONLINE. Squarespace processes website data on our behalf where it acts as a processor. For transfers to countries outside the EEA, Squarespace provides safeguards including the EU-U.S. Data Privacy Framework where applicable and the European Commission Standard Contractual Clauses. Further information is available in the Squarespace Privacy Policy and Squarespace Data Processing Addendum.

Cookies and similar technologies.

The website may use technically necessary cookies and, depending on your consent settings, additional technologies for analytics, media embedding or other optional functions.

Technically necessary cookies and similar technologies may be used to provide core website functions, security and session management. Where access to or storage of information on your device is strictly necessary, Section 25(2) TDDDG applies and the related personal-data processing is based on Article 6(1)(f) GDPR. Optional technologies are used only in accordance with the consent choices available through the website. Where consent is required, the legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can change or withdraw optional consent through the available cookie controls; withdrawal does not affect processing that took place before withdrawal.

When you contact DAMMA.

If you contact DAMMA.ONLINE by email or through a website form, the information you provide will be processed in order to respond to your inquiry. Human Signals submissions are described separately below.

Data will not be retained longer than necessary for the respective purpose unless legal retention obligations apply.

The mailbox info@damma.online is hosted by Google. Email contents, sender and recipient details and technical delivery information are processed to receive, store and manage correspondence and form submissions.

We use a Google Workspace business account to operate the mailbox. Google processes relevant mailbox data under its applicable Google Workspace contractual and data-processing terms. Depending on the nature of your inquiry, the legal basis is Article 6(1)(b) GDPR where communication is necessary for contractual or pre-contractual matters, or Article 6(1)(f) GDPR for general correspondence, based on our legitimate interest in answering inquiries and managing communications. International transfers are protected by the safeguards provided in Google's applicable data-processing terms, including Standard Contractual Clauses where required. Correspondence is deleted when it is no longer needed for the purpose for which it was received, unless statutory retention duties or the establishment, exercise or defence of legal claims require longer storage. Further information: Google Cloud Data Processing Addendum.

A signal you choose to share.

The Human Signals form lets you submit a short text for editorial review and possible publication on DAMMA.ONLINE. Participation is voluntary. You can use the rest of this website without submitting a signal.

We process the text you submit, any name or alias you choose to provide, your publication permission and the submission information supplied with the form, such as its date and time. No email address is requested in this form. Please do not include sensitive personal information or private information about other people.

Submissions are handled through Squarespace and delivered to the Google-hosted mailbox info@damma.online for review. Squarespace and Google therefore process information involved in this delivery and storage. Technical information may also be processed for delivery and spam protection.

Every signal is reviewed manually. Nothing is published automatically. If selected, your text and optional name or alias may appear on the Human Signals page, the Home page or elsewhere on DAMMA.ONLINE. If you leave the name field blank, no name will be displayed. This does not guarantee technical anonymity.

Review and publication of personal data in your signal are based on your consent under Article 6(1)(a) GDPR. To submit a signal for this purpose, you must provide the signal and select the consent checkbox; a name or alias is optional. We do not use the submission as a newsletter subscription.

Signals not selected for publication are deleted from the review mailbox no later than 90 days after receipt. Copies under our control that are no longer needed for the same purpose are also deleted. This is our review-retention rule, not a claim that every service-provider backup is erased on the same date.

Selected signals are retained while published for this purpose and while the relevant consent remains in effect. Any minimal records needed to demonstrate consent or handle legal claims are retained only as necessary for those purposes and subject to applicable legal requirements.

You may withdraw consent at any time by emailing info@damma.online. Please identify the signal by its text or page link so we can locate it. Withdrawal does not affect the lawfulness of earlier processing. We will stop further consent-based use and remove the signal from pages we control without undue delay, subject to any applicable legal exceptions.

Published signals are accessible to the public and may be copied or indexed by others. We cannot guarantee removal of every independent third-party copy.

Depending on the Squarespace form configuration, submission data may also be processed or temporarily stored within Squarespace systems in addition to delivery to our Google Workspace mailbox. We delete active copies under our control when they are no longer needed and apply the 90-day review-retention rule described above to unselected signals. Service-provider backup cycles may continue for a limited period after active deletion. Evidence of consent is retained only for as long as reasonably necessary to demonstrate the consent or to establish, exercise or defend legal claims.

Protecting the form.

Google reCAPTCHA is enabled on the Human Signals form to help detect automated submissions and abuse. It evaluates technical information associated with the browser and interaction with the website. This may include IP address, browser and device information and interaction signals.

reCAPTCHA uses a risk-analysis cookie when it runs. Google states that, from April 2, 2026, it processes reCAPTCHA customer data as a processor under its applicable contractual terms. See Google reCAPTCHA data-processing information.

The legal basis for the processing of personal data for spam, fraud and abuse prevention is Article 6(1)(f) GDPR. Our legitimate interest is protecting the form and the website from automated abuse. Google states that, from April 2, 2026, it acts as a processor for reCAPTCHA Customer Data under the Google Cloud terms and Cloud Data Processing Addendum. The reCAPTCHA risk-analysis cookie remains part of the service. Any access to or storage of information on a user device is additionally subject to the requirements of Section 25 TDDDG. International transfers are covered by the safeguards in the applicable Google contractual terms, including Standard Contractual Clauses where required.

Purchases and payment.

When digital products are purchased, information required for processing the order may be processed, including name, email address, billing information, transaction data and information concerning the purchased product.

We use Squarespace Payments for checkout. Under the Payments Terms applicable to businesses outside the United States, this service is provided by Squarespace Ireland Limited. Squarespace Payments uses Stripe for payment processing and Sift for fraud monitoring and detection.

Information required to complete and secure a transaction is shared with the relevant payment services. Depending on the payment method, this can include billing and contact details, order and transaction information, payment details and technical information used to detect fraud.

Further information: Squarespace Privacy Policy, Stripe Privacy Policy and Sift Service Privacy Notice.

Order processing is based on Article 6(1)(b) GDPR. Processing required to meet tax, accounting or other statutory obligations is based on Article 6(1)(c) GDPR. Fraud prevention and transaction security may additionally be based on Article 6(1)(f) GDPR. Order and accounting data are retained for the periods required by applicable commercial and tax law. Payment service providers may retain transaction data under their own legal and regulatory obligations. Where data is transferred outside the EEA, the respective provider applies the transfer safeguards described in its privacy and data-processing terms.

Embedded media.

The Sound section uses YouTube media players. When embedded media is loaded or played, information may be transmitted to the provider. The processing depends on the integration, browser settings and consent choices.

YouTube is a service of Google. When a YouTube player is loaded or activated, Google may receive technical information such as the IP address, device and browser information, the page visited and interaction with the player. Optional media processing is based on Article 6(1)(a) GDPR where consent is required, together with Section 25(1) TDDDG for non-essential storage or access on the device. You may refuse optional media and continue to use the rest of DAMMA.ONLINE. Google may process data outside the EEA using the safeguards described in its applicable privacy and data-processing terms. Further information is available in the Google Privacy Policy.

Your data protection rights.

Subject to applicable requirements, you may request access, correction, deletion, restriction or portability of your personal data.

You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time.

You may withdraw consent for future processing. Contact info@damma.online to exercise your rights. We may need proportionate information to identify the data concerned.

You may lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your habitual residence, workplace or the alleged infringement.

This notice may change.

This privacy notice may be updated when the website, its services or legal requirements change.

Last updated: September 15, 2026.