Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:
Hot Mistake PR
c/o ClevverMail
Friedrichstraße 114A
10117 Berlin
Germany

Email: hotmistakepr@gmail.com
Phone: No phone number

Data Protection Officer: Not required under Art. 37 GDPR.

2. Purposes and Legal Bases

• Website delivery and technical security (Art. 6(1)(f) GDPR)
• Language and theme preferences via local storage (Art. 6(1)(f) GDPR)
• Handling contact requests submitted via form (Art. 6(1)(a) GDPR)
• Loading external media (YouTube) only after consent (Art. 6(1)(a) GDPR)

3. Local Storage / Cookies

This website stores the following browser entries:

• hotmistake-lang (language preference)
• hotmistake-theme (light/dark preference)
• hotmistake-consent (consent choices and timestamp)

Essential entries are required for website operation. Optional categories are activated only after explicit consent.

Consent choices are requested again after 180 days to keep preferences up to date.

4. Contact Form and Processor

When you use the contact form, we process data you submit (name, email, company/project, message) to answer your request.

Data is sent to the third-party service FormSubmit (formsubmit.co) only after your explicit consent to the "Contact processing" category.

Processor / recipient details: FormSubmit (formsubmit.co), operated by Upsurge Ventures, Bangalore, India. FormSubmit forwards your data to us via email and does not permanently store it on its own servers. Processing is solely for the purpose of delivering your request. As FormSubmit is based in a third country (India), we rely on EU Standard Contractual Clauses or appropriate safeguards under Art. 46 GDPR.

Retention period: We retain contact requests for up to 24 months after the inquiry is resolved, unless statutory retention obligations (e.g. tax or commercial law) apply.

5. External Media (YouTube)

YouTube videos remain blocked by default. A connection to YouTube/Google is created only after you consent to the "External media" category.

This may involve processing of personal data (e.g., IP address, usage metadata, cookie identifiers where applicable).

Recipients: Google Ireland Limited / Google LLC

International transfers: Google uses EU Standard Contractual Clauses and the EU–US Data Privacy Framework as transfer mechanisms. Further information at Google Privacy Frameworks.

6. Data Retention

Personal data is retained only as long as necessary for the stated purposes or as required by law.

Specific retention schedule: Local storage entries (language, theme, consent) remain until you delete them or withdraw consent. Contact requests: up to 24 months after resolution, unless statutory retention obligations apply. Consent records are retained for the duration of processing and any potential legal proceedings.

7. Your GDPR Rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Right to withdraw consent at any time for future processing (Art. 7(3) GDPR)

You can withdraw or change consent for optional categories at any time via the privacy settings on the homepage.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in your EU member state of habitual residence, place of work, or place of the alleged infringement.

Relevant authority (Berlin): Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI), Alt-Moabit 59–61, 10555 Berlin, Germany; www.datenschutz-berlin.de. You may also lodge a complaint with the supervisory authority in your place of residence.

9. Changes to This Policy

We may update this Privacy Policy when processing activities or legal requirements change.