Privacy Policy



1. Introduction

This privacy policy explains how personal data is collected, processed, and used when you visit the website thomschrama.com. I take your privacy seriously and process your data in accordance with the General Data Protection Regulation (GDPR).





2. Responsible Party

Name: Thom Schrama

Address: Krohstr. 2

50968 Cologne, Germany

Email: mail@thomschrama.com

Website: https://www.thomschrama.com





3. Hosting

This website is hosted by:

Hosting Provider: TransIP B.V.

Address: Schipholweg 9B

2316 XB Leiden

The Netherlands

Server Location: The Netherlands (Amsterdam or Delft)



When you visit this website, the hosting provider automatically collects and stores information in so-called server log files. These include:

  • Visited pages
  • Date and time of access
  • Amount of data sent (in bytes)
  • Referring URL
  • Browser type and version
  • Operating system used
  • IP address (anonymized, where possible)


This data is processed for technical and security purposes and is automatically deleted after [e.g. 14] days. This data is not combined with other data sources.





4. Data Collection and Use

a) When visiting the website:

Some technical data is collected automatically by the web server (see section above).

b) When contacting me (e.g. by email or contact form):

If you contact me directly, your name, email address, and message will be stored for the purpose of responding to your request.

Legal basis: Art. 6(1)(b) GDPR – Contract initiation or inquiry handling.





5. Cookies

This website does not use cookies by default. If third-party services are embedded (e.g. fonts, videos), cookies may be set by those services. If that occurs, you will be notified via a cookie banner on first visit.







6. Third-Party Services

a) Google Fonts (if used):

If not hosted locally, Google may receive information such as your IP address when fonts are loaded from their servers. Google’s privacy policy applies: https://policies.google.com/privacy

b) Embedded content (e.g. YouTube, Vimeo, Instagram):

Embedded media from third-party providers behaves the same as if you visited their site directly. These providers may collect data, use cookies, and track your interaction, especially if you are logged into their services.





7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (“right to be forgotten”) (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Complaint to a data protection authority (Art. 77 GDPR)

To exercise these rights, contact me at the email address above.





8. Data Transfers to Third Countries

If services such as Google, Meta, or other U.S.-based platforms are used, data may be transferred outside the EU. These providers are subject to the EU-U.S. Data Privacy Framework or appropriate safeguards under GDPR.





9. Updates

This privacy policy is effective as of July 2025. I may update it as needed to reflect changes to the website, services, or legal obligations.