Privacy policy

1. Controller

Controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):

• Proxfon Media
• Owner: Meris Vehabovic
• Salzwiesenstraße 4
• 70435 Stuttgart
• Germany
• Phone: +49 176 62113983
• Email: info@viralbp.de
• International: hello@viralbp.com

2. Principles

We only process personal data insofar as this is necessary to provide a functioning website, to answer your enquiries or to initiate and carry out a collaboration.

• No cookies: this website sets no cookies and stores nothing in your browser.
• No tracking: no analytics tools, advertising networks or tracking pixels are integrated.
• No external content: fonts and scripts are loaded locally from our server. There are no social media plugins, embedded videos or third-party maps.
• External links (e.g. to proxfon.com or buildbp.de) are plain links. Data is only transferred once you click a link.

3. Website access and server logs

When you visit this website, the web server automatically processes technical access data: IP address, date and time of access, requested file or URL, amount of data transferred, status code, referrer URL, and browser type and operating system.

This processing is required to deliver the website and to ensure stable and secure operation. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Log data is deleted after 30 days at the latest unless it is needed longer to investigate a specific security incident.

4. Hosting

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The servers are located in the European Union.

A data processing agreement pursuant to Art. 28 GDPR is in place with the host. The host processes data exclusively on our behalf and according to our instructions. The legal basis is Art. 6 (1) (f) GDPR (secure and efficient provision of the website).

5.1 Contact form

When you write to us via the contact form, we process the data you enter: name, company, email address, optionally phone number and website, goal, interests, channels, optionally budget range, and your message.

The data is sent to us by email and used solely to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry aims at a contract, otherwise Art. 6 (1) (a) GDPR (your consent) and Art. 6 (1) (f) GDPR (answering enquiries).

We also transmit the page on which the form was submitted and the page or website you came from. This shows us which content leads to enquiries. The legal basis is Art. 6 (1) (f) GDPR.

To protect against spam we use an invisible check field, a timing check and a limit on submissions per sender, but no external CAPTCHA service. For the limit, an irreversible hash of your IP address is stored on the server for no more than 10 minutes.

5.2 Creator application

When you apply via the creator form, we process your name, email address, profile or portfolio links, follower range, niche, formats, equipment, city and availability.

We use this information to assess your profile and to approach you for suitable campaigns. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and your consent under Art. 6 (1) (a) GDPR. You can withdraw your application at any time; the data will then be deleted.

5.3 Email and phone

When you contact us by email or phone, we process your details (e.g. name, email address, phone number, content of the enquiry) to handle your request. The legal basis is Art. 6 (1) (b) or (f) GDPR.

6. Retention period

We delete enquiries once they have been fully handled and no collaboration results, at the latest after 12 months. If a collaboration results, statutory retention periods apply (up to 6 years for business correspondence under Section 257 German Commercial Code, up to 10 years for tax-relevant records under Section 147 German Fiscal Code).

7. Recipients

Your data is received only by us and by the technical service providers we use to operate the website and send email (hosting and email service). They are contractually bound as processors. Data is not passed to third parties for marketing purposes. Data is not transferred to countries outside the EU or EEA.

8. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR), e.g. the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany

9. Right to object

Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to info@viralbp.de is sufficient.

10. Obligation to provide data

Providing your data is neither legally nor contractually required. Without the fields marked as required, however, we cannot process your enquiry.

11. Data security

This website uses TLS encryption (recognisable by “https://” in the address bar). Data you send to us therefore cannot be read by third parties.

12. Data protection officer

No data protection officer has been appointed, as the requirements of Art. 37 GDPR and Section 38 BDSG are not currently met. For data protection questions please contact info@viralbp.de.

13. Changes

We update this privacy policy when the website or legal requirements change. The version published here applies. As of: 12.10.2026