Privacy Policy
1. Data Controller
chocosite LLC · 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, USA
Operations: Brand Media by Deek
Email: mail [at] brandmediabydeek [dot] com · Tel: +66 96 241 1841
2. Data We Collect
We collect personal data when you:
- Submit our contact/application form
- Contact us by email or phone
- Visit our website (server log files)
3. Contact Form
When you use our application form, we collect: name, email address, mobile phone number, Instagram handle, TikTok handle (optional), website/platform URL (optional), and free-text message (optional).
This data is used exclusively to process your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time with effect for the future.
4. Email Delivery via Brevo
Form submissions are processed via Brevo (formerly Sendinblue, Brevo SAS, 106 bd Haussmann, 75008 Paris, France) as a transactional email service. Brevo acts as a data processor under Art. 28 GDPR. A data processing agreement is in place. More info: brevo.com/legal/privacypolicy
5. Server Log Files
Our hosting provider automatically collects and stores information in server log files that your browser transmits: browser type/version, operating system, referrer URL, hostname, time of request and IP address. This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical provision).
6. Cookies
Technically necessary: Storage of your cookie consent decision (localStorage key "dcx_consent"). Legal basis: Art. 6(1)(f) GDPR.
Optional cookies: Only set after your explicit consent. You can delete cookies at any time via your browser settings.
Our Own Visitor Analytics
To understand how the site is used, I operate my own privacy-friendly visitor analytics on my own infrastructure. No external analytics providers are involved; no Google Analytics, Facebook Pixel or advertising cookies are used, and no data is passed on to third parties.
What is recorded: the pages viewed and their order, the content sections that became visible within a page and therefore the last section reached, the broad origin of the visit (direct, Google, Bing, Instagram, Facebook, Pinterest, AI services, other), the device class (desktop, tablet, mobile), and the opening and successful submission of the contact form. Not recorded are form contents, your name, email address or IP address; the analytics never receives an IP address and never stores one.
Two randomly generated identifiers for visit and session are stored in your browser's local storage; a session ends after 30 minutes without activity. Individual visitor paths are deleted after no more than 72 hours. Only anonymous daily counters are kept permanently.
Consent: from Germany, the EU/EEA, the United Kingdom and Switzerland, and where the country of origin cannot be determined, we only record after your consent; the notice offers "Reject" and "Accept" as equally weighted options. From other countries, recording takes place without a prior dialogue and can be switched off at any time via "Privacy settings" in the footer. The country is determined exclusively on the server; the IP address is not passed to the analytics. The legal basis is Art. 6(1)(a) GDPR where consent is required, otherwise Art. 6(1)(f) GDPR.
7. Locally Hosted Fonts
This site uses web fonts stored locally on our own server to display typefaces consistently. The font files are loaded exclusively from our own server. No connection to Google servers is established for loading fonts, and no personal data is transmitted to Google in this context. Legal basis: Art. 6(1)(f) GDPR.
8. Your Rights
Under GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and withdrawal of consent (Art. 7(3)).
To exercise your rights: mail [at] brandmediabydeek [dot] com
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.
10. Data Security
This site uses SSL/TLS encryption for secure data transmission. An encrypted connection is indicated by "https://" and the padlock icon in your browser.
11. Retention & Deletion
Personal data from contact enquiries is deleted once no longer required for its original purpose and no statutory retention obligations apply, typically 2 years after last contact.