Privacy notice

1. Controller

ARWIVO — Arkadiusz Rzad

Am Weidig 49

98617 Meiningen, Germany

Email: contact@arwivo.com

2. Hosting and access data

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you open the website, the hosting infrastructure processes technical access data such as your IP address, date and time, requested resource, response status, referrer and browser information. This processing is necessary to deliver the website, maintain its stability and protect it against misuse.

The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in providing a secure and reliable website. Technical logs are retained only for as long as they are required for operation, security and troubleshooting, and are then deleted or anonymised unless a legal obligation requires longer retention.

3. Contact by email and form

If you contact us by email or through the contact form, we process your email address, message and related metadata in order to respond. The legal basis is Art. 6(1)(b) GDPR where your message concerns steps prior to a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling correspondence.

General correspondence is normally deleted within twelve months after the matter has been concluded. Messages that form part of a business or tax record are retained for the applicable statutory period. Where correspondence is needed to establish, exercise or defend legal claims, retention is limited to the necessary scope and period. Email is provided through Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

Providing your email address and message is voluntary, but both are needed to answer a form enquiry. The form forwards the message to our contact mailbox; it does not create a separate message database. To limit spam, the server processes your IP address and keeps pseudonymous, IP-derived counters in 10-minute windows, together with aggregate minute/day counters. Expired counters are removed on the next valid submission. This is based on our legitimate interest in protecting this communication channel (Art. 6(1)(f) GDPR). No marketing use is made of these data.

4. Language preference

When you select a language, this website stores “en”, “pl” or “de” under the key “arwivo-language” in your browser’s local storage. The value is used only to remember your preferred language. It is not used for tracking and remains until you delete your browser data.

This storage is necessary to provide the setting you expressly requested (§ 25(2)(2) TDDDG).

5. Cookies, analytics and external content

This website does not use analytics, external advertising scripts, tracking pixels, social-media plug-ins or third-party embedded media. Neither the website nor the contact form sets marketing cookies. The form uses no external CAPTCHA service.

ARWIVO Finds contains labelled affiliate links to Amazon.de. Clicking one takes you away from our website. The link passes our Associate ID so Amazon can attribute qualifying purchases and calculate commissions. During your visit, Amazon processes technical data and may use cookies or similar technologies under its own privacy and cookie policies. We do not embed Amazon scripts, product images or tracking pixels for this purpose; loading our articles alone does not trigger an Amazon request embedded by us.

Amazon.de Privacy Notice

ARWIVO Finds also contains Awin affiliate links, including links to OTTO. Clicking routes through Awin to the shop and passes identifiers for commission attribution. Awin and the shop may process technical data and use cookies under their policies. OTTO photos are hosted locally; opening the article alone does not connect to Awin or OTTO.

Awin privacy policy · OTTO privacy policy

6. Processors and international transfers

Hostinger processes hosting and email data on our behalf. Depending on the service and infrastructure used, Hostinger may engage subprocessors inside or outside the European Economic Area. Where required, transfers are protected by an adequacy decision or the European Commission’s Standard Contractual Clauses. Further information is available in Hostinger’s Data Processing Addendum.

Hostinger Data Processing Addendum

7. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests. You may contact us at contact@arwivo.com.

You may also lodge a complaint with a supervisory authority. The competent authority for our establishment is the Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany; poststelle@datenschutz.thueringen.de; www.tlfdi.de.

8. Correspondence and AI

The proprietor personally handles customer correspondence and all Randozi matters, including privacy enquiries and requests, in the business mailbox contact@arwivo.com. Email is provided by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

We do not send this correspondence, attachments, sender details or metadata to generative AI services, including ChatGPT by OpenAI, for summaries, translations or drafting replies. We do not send automated AI-generated replies.

This rule concerns our use of generative AI to handle correspondence. It does not mean that our email provider performs no technical processing: delivery, storage and security of email still require processing by Hostinger as described above.

Please do not send passwords, identity documents or health information through the contact form. For questions or an objection concerning the processing of your data, contact contact@arwivo.com.

OpenAI European Privacy Policy

9. Newsletter

The ARWIVO newsletter offers three topics: home and interiors (Finds guides and recommendations, including affiliate content), reflection and personal growth (Within and related products), and our other apps and studio news. We send only content relevant to your selected topics. Subscribing is voluntary and separate from using the contact form. We process your email address, selected language, interests, and consent dates and version on the basis of Article 6(1)(a) GDPR. We send newsletters only after email confirmation (double opt-in). We do not add contacts from our business mailbox to the newsletter or automatically enrol you in new topics.

The system and private database run on our hosting. Our existing Hostinger email service delivers messages; we do not use a separate email marketing provider. The signup form uses no email-open pixels, tracked redirects or marketing cookies. The private administration panel uses an essential session cookie only when that panel is accessed.

We delete unconfirmed subscriptions during the next scheduled cleanup after 7 days. On unsubscribing, we remove your email address from the active database and cancel queued messages. A message already handed to the mail server cannot be recalled. Technical records of completed sending tasks, without email addresses, are deleted during cleanup after 90 days.

Daily backups and test-restoration copies are stored outside the public website directory with restricted access, so that we can recover data following a failure (Article 6(1)(f) GDPR). They may contain data from before an unsubscribe request. Thirty days is the retention target and review point for routine backups, not an automatic deletion deadline. During a monthly review, we identify older copies replaced by a newer verified backup for manual deletion; longer retention is justified only by an ongoing incident or the need for safe recovery. Backups are not used to send newsletters. Recovery must not reactivate a subscription after consent has been withdrawn.

We retain evidence of consent (an identifier derived from the email address using a secret key, dates, selected topics, language, consent statement and its version, and preference changes) for the duration of the subscription and for up to 3 years after it ends, to demonstrate lawful sending and defend legal claims (Article 6(1)(f) GDPR). These identifiers are pseudonymous, not anonymous. Short-lived technical identifiers used to prevent abuse expire after one hour, and administration login protection identifiers after 15 minutes; the next scheduled cleanup or request removes them. We do not store full IP addresses in the newsletter database. Hosting logs are described in section 2.

The link in a newsletter lets you change your topics and email language without logging in. A separate link lets you unsubscribe from all topics. You can withdraw consent at any time, free of charge, including by writing to contact@arwivo.com. Withdrawal does not affect the lawfulness of earlier processing. Subscription management links are personal: do not share them with others. We do not provide subscriber lists or confirmation records to generative AI services.