Privacy Policy
Last updated: 02 Aug 2026
1. Controller
The controller responsible for data processing on this website is:
Hot Mistake PR
c/o ClevverMail
Friedrichstraße 114A
10117 Berlin
Germany
Email: hotmistakepr@gmail.com
Phone: No phone number
Data Protection Officer: Not required under Art. 37 GDPR.
2. Purposes and legal bases
- Providing the website and technical security (Art. 6(1)(f) GDPR)
- Handling contact requests via the form (Art. 6(1)(a) GDPR)
- Embedding external media (YouTube) only after consent (Art. 6(1)(a) GDPR)
3. Local storage / cookies
This website does not use analytics or advertising cookies. It stores the following preference:
hotmistake-consent(external-media choice and timestamp)
Language is selected via the site URL (`/` English, `/de/` German). The external-media preference is stored only after you make an explicit choice.
Consent choices are requested again after 180 days to keep preferences up to date.
4. Contact form and processor
When you use the contact form, we process data you submit (name, email, company/project, message) to answer your request.
Data is sent to the third-party service FormSubmit (formsubmit.co) only after you select the required consent checkbox in the contact form and submit your request.
Processor / recipient: FormSubmit (formsubmit.co), operated by Upsurge Ventures, Bangalore, India. FormSubmit forwards your data to us via email and does not permanently store it on its own servers. Processing is solely for delivering your request. As FormSubmit is based in a third country (India), we rely on EU Standard Contractual Clauses or appropriate safeguards under Art. 46 GDPR.
Retention: We retain contact requests for up to 24 months after the inquiry is resolved, unless statutory retention obligations apply.
5. External media (YouTube)
YouTube videos remain blocked by default. A connection to YouTube/Google is created only after you consent to the “External media” category.
This may involve processing of personal data (e.g., IP address, usage metadata, cookie identifiers where applicable).
Recipients: Google Ireland Limited / Google LLC
International transfers: Google uses EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Further information at Google Privacy Frameworks.
6. Data retention
Personal data is retained only as long as necessary for the stated purposes or as required by law.
7. Your GDPR rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- Right to withdraw consent at any time for future processing (Art. 7(3) GDPR)
You can withdraw or change external-media consent at any time via the privacy settings on the homepage.
8. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
Competent authority (Berlin): Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Alt-Moabit 59–61, 10555 Berlin; www.datenschutz-berlin.de.
9. Updates
We update this privacy policy as needed, especially when processing activities or legal bases change.