---
import Base from "../../layouts/Base.astro";
const updated = new Date().toLocaleDateString('en-GB', { year: 'numeric', month: 'long', day: '2-digit' });
---
<Base path="/en/datenschutz" title="Privacy Notice – Valtrix">
  <h1 class="text-2xl font-bold mt-8">Privacy Notice</h1>

  <p class="mt-4 text-textMuted">This notice explains how we process personal data when you visit this website. The site is a static site; we do not use tracking or marketing cookies and no external resources (e.g. Google Fonts, Analytics, form services) are loaded.</p>

  <section class="mt-8 grid gap-2">
    <h2 class="text-xl font-semibold">1. Controller</h2>
    <p>The controller within the meaning of the GDPR is: <strong>Valtrix</strong>. Address see <a class="underline text-primary" href="/en/impressum">Imprint</a>. E‑mail: <a class="underline text-primary" href="mailto:kontakt@valtrix.systems">kontakt@valtrix.systems</a></p>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">2. Hosting & delivery</h2>
    <p>This website is delivered as a static application. Delivery takes place via infrastructure within the EU.</p>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">3. Server log files</h2>
    <p>When the website is accessed, the responsible server/proxy processes access data for technical reasons (e.g. IP address, date/time, requested resource/URL, referrer, user agent, status code). Processing is for operation, security and error analysis.</p>
    <ul class="list-disc pl-6 text-textMuted">
      <li>Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation)</li>
      <li>Storage period: Logs are rotated and deleted regularly, unless a security‑relevant evaluation is required.</li>
    </ul>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">4. Cookies & external content</h2>
    <p>We do not use tracking or marketing cookies. No external content, fonts or scripts from third parties are loaded.</p>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">5. Contact</h2>
    <p>When contacting us by e‑mail or via the provided <em>mailto</em> function, we process the transmitted data (e.g. name, e‑mail, message) to handle the request.</p>
    <ul class="list-disc pl-6 text-textMuted">
      <li>Legal basis: Art. 6(1)(b) GDPR (pre‑contractual/contractual communication) or (f) (general inquiries)</li>
      <li>Storage period: We delete inquiries once handled unless statutory retention requires longer storage.</li>
    </ul>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">6. Recipients & processors</h2>
    <p>To provide the website we may use technical service providers (e.g. hosting/operations). They process data only on our instructions (Art. 28 GDPR). No third‑country transfer takes place unless explicitly stated.</p>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">7. Your rights</h2>
    <p>You have rights to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77).</p>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">8. Security</h2>
    <p>We implement technical and organizational measures pursuant to Art. 32 GDPR (e.g. TLS encryption, hardened infrastructure, least privilege). The website does not load resources from third parties.</p>
  </section>

  <section class="mt-6 grid gap-2">
    <h2 class="text-xl font-semibold">9. Updates to this notice</h2>
    <p>Effective: {updated}. We update this notice when technology, legal requirements or our offering changes.</p>
  </section>
</Base>
