Privacy policy

Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Principle

This website is deliberately built to collect as little as possible. There are no advertising networks, no cross-site recognition and no sharing of data for advertising purposes. Only what is needed to run the site and to answer enquiries is processed.

Visiting the site and server log files

When you visit this website, the hosting provider automatically collects the data your browser transmits. This data is technically necessary to deliver the site and to keep it stable and secure.

• IP address of the requesting device
• Date and time of access
• Name and URL of the page requested
• Referrer URL
• Browser type, browser version and operating system

The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in delivering the site correctly and keeping it secure. This data is not combined with any other source.

Traffic measurement

Vercel Web Analytics is used to measure traffic. It works without cookies, without fingerprinting and without cross-site recognition, and collects only aggregate figures that cannot be attributed to an individual.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in understanding which parts of this site are used, without tracking the people who use them.

Contact form and enquiries

If you use the contact form, what you enter is sent to me by email and stored in order to deal with your enquiry. Name and email address are required; everything else is optional.

The legal basis is Article 6(1)(b) GDPR where the enquiry is directed at entering into a contract, and otherwise Article 6(1)(f) GDPR, on the legitimate interest in answering enquiries.

Your enquiry and the correspondence around it are deleted once they are no longer needed and no statutory retention period requires otherwise.

Processors

The following providers process data on my behalf. A data processing agreement under Article 28 GDPR is in place with each of them.

Vercel Inc.

Hosting and delivery of this website, including server log files

• Data processed: IP address, date and time of access, page requested, referrer, user agent
• Provider: 440 N Barranca Ave #4133, Covina, CA 91723, USA

Vercel Web Analytics

Aggregate traffic measurement, without cookies and without cross-site recognition

• Data processed: Page viewed, referrer, coarse region, device type — aggregated, not attributable to an individual
• Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA

Resend, Inc.

Delivering enquiries submitted through the contact form by email

• Data processed: Whatever the form was given: name, email address and the content of the enquiry
• Provider: 2261 Market Street #5039, San Francisco, CA 94114, USA

Transfers to third countries

The providers named above are established in the United States, so processing of personal data outside the European Union cannot be ruled out. Transfers take place on the basis of the European Commission's standard contractual clauses under Article 46(2)(c) GDPR or, where the provider concerned is certified, on the basis of the EU-US Data Privacy Framework under Article 45 GDPR.

Cookies

This website sets no analytics or advertising cookies. The only cookie it sets is the strictly necessary one below — and only if you actively use the language switcher:

• lang — Remembers the language chosen with the language switcher, so the choice survives the next visit. Content: “en” or “de”. Storage period: 12 months.

Because this cookie exists solely to provide a service you have explicitly asked for, storing it is permitted without consent under § 25(2)(2) TDDDG. For the same reason, this website has no cookie banner.

Fonts

The typefaces used are bundled when the site is built and served from this server. Visiting the site opens no connection to Google or any other font provider, and no IP address is passed to a third party.

Your rights

You have the following rights in respect of your personal data:

• Access to the data processed (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing (Article 21 GDPR)
• Withdrawal of consent with effect for the future (Article 7(3) GDPR)

An informal message to the email address above is enough to exercise any of these rights.

Right to complain to a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement (Article 77 GDPR).

Changes to this policy

This policy is updated whenever the website or the services it uses change. The version published here is the one that applies.