Skip to content

Privacy policy

This page explains which personal data I process when you visit reeliza.com and when you use the Reeliza app at app.reeliza.com, why I use it, and what rights you have. It follows the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).

1. Controller

Nestor Segura
Heidmühlenweg 54
25336 Elmshorn
Germany
Email: [email protected]
Phone: +49 173 6095352

I am not required to appoint a data protection officer. For any question about your data, email me at the address above.

2. Visiting this website

The site is hosted on Cloudflare Pages by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you open a page, Cloudflare processes the technical data needed to deliver it and protect it from attacks: IP address, date and time, requested page, browser and operating system, and the referring site. Cloudflare acts as a processor.

Legal basis: Art. 6 (1) (f) GDPR, my legitimate interest in a secure, working website. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and the European Commission's standard contractual clauses also apply.

Fonts and animation libraries are served from this domain, without Google Fonts or other content delivery networks. Google's measurement is explained in section 3.

3. Cookies and browser storage

Necessary. Your choice in the banner is saved in your browser's local storage (localStorage, key reeliza-consent). This is strictly necessary to remember your decision (§ 25 (2) no. 2 TDDDG) and is never sent to a server.

Cloudflare may set a technical security cookie (for example __cf_bm) to tell people from bots. It is also strictly necessary and lasts at most 30 minutes.

Google Tag Manager and Google Analytics

I use Google Tag Manager and Google Analytics 4 by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the site is used: page views, scroll depth, sections read, clicks on buttons and links, questions opened, language switches, device type, browser, approximate country and where visits come from. Google Analytics 4 does not store full IP addresses. Google signals and ad personalisation are turned off.

Tag Manager organises the site's tags and sets no cookies itself. Google Analytics sets the cookies _ga and _ga_YLL51HVRDM, lasting up to 2 years, only if you consent to the "Analytics" category. Legal basis: your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Analytics data is kept for 14 months.

I use Google Consent Mode. If you visit from the European Economic Area, the UK or Switzerland, analytics starts switched off. If you do not accept, Google only receives signals without cookies or identifiers (for example, that a visit happened and whether you consented), which it uses in aggregate to estimate traffic. Outside those regions, analytics starts switched on and you can turn it off at any time.

Google may process data in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. The "Marketing" category exists in the banner but does not activate any tool today.

You can change or withdraw your consent at any time with "Cookie settings" at the bottom of every page. Withdrawing does not affect earlier processing.

4. "Notify me" form

If you leave your email in the form, I use it for one purpose only: to write to you once when Reeliza opens outside the community. Legal basis: your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time by emailing me. I delete your address after sending that notice, or earlier if you ask. An email service provider stores and sends the message as a processor.

5. Links to Skool

The "Join the community" buttons lead to Skool (Skool, Inc., USA). When you click, you leave this site and Skool's privacy policy applies. Until you click, no data is sent to Skool.

6. The Reeliza app

If you use the app at app.reeliza.com, I process the following data to provide the service you signed up for (Art. 6 (1) (b) GDPR):

From the reference accounts you follow, only public data is read (views, likes, comments, caption text and audio for transcription) to calculate results and extract patterns. Legal basis: Art. 6 (1) (f) GDPR, the legitimate interest in analysing openly published content.

Processors and recipients

Where a processor is outside the European Economic Area, transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

Retention

I keep your account data while your subscription is active and delete it within 30 days after it ends, except data I must keep by law, such as invoices, which are kept for the German tax and commercial retention periods (up to 10 years). Videos you upload for publishing are deleted from storage after they are published; the app keeps the link to the Instagram post.

I make no decisions based solely on automated processing that have legal effects on you (Art. 22 GDPR). AI suggestions are drafts you accept or discard.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you can withdraw it at any time without affecting earlier processing (Art. 7 (3)). To exercise these rights, email [email protected].

You can also lodge a complaint with a supervisory authority. The one responsible for me is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

8. Changes

I update this policy when the services or the law change. The current version is always the one published on this page.