Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information on data processing

We generally process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing takes place solely on the basis of the applicable statutory provisions (GDPR, DDG).

3. Your rights

You have the following rights regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw a given consent (Art. 7(3) GDPR) with effect for the future

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

4. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit our website, Vercel, as the operator of the server infrastructure, collects various technical data (in particular IP address, date and time of access, content accessed) in order to deliver the website and to ensure stability and security.

The legal basis is our legitimate interest in a secure and efficient provision of our online offering (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Vercel. Where data is transferred to the USA, this is done on the basis of appropriate safeguards (EU standard contractual clauses or the EU-US Data Privacy Framework). Further information: vercel.com/legal/privacy-policy.

Server log files

When the website is accessed, information is automatically recorded in server log files that your browser transmits: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request and IP address. This data is not merged with other data sources and serves solely technical delivery and security.

5. Contact & contact form (Resend)

If you contact us via the contact form or by email, we process the data you provide (in particular first and last name, email address, company/organisation, selected topic and your message) in order to handle your request and in case of follow-up questions.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the checkbox in the form, as well as our legitimate interest and the initiation of a contractual relationship (Art. 6(1)(f) and (b) GDPR).

For the technical dispatch and delivery of the emails triggered via the form, we use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor. The data entered in the form is transmitted to and processed by Resend. A data processing agreement (Art. 28 GDPR) is in place with Resend; appropriate safeguards apply for the transfer to the USA (EU standard contractual clauses or the EU-US Data Privacy Framework). Further information: resend.com/legal/privacy-policy.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and no statutory retention obligations prevent deletion.

6. Web analytics (Umami)

To statistically evaluate the use of our website, we use Umami, a privacy-friendly analytics software. Umami works without cookies and does not create cross-device user profiles. Only anonymised or aggregated data is collected (e.g. pages visited, approximate origin at country level, browser/device type used, referrer). IP addresses are not stored; identification of individual visitors is not possible.

The legal basis is our legitimate interest in a needs-based design and statistical evaluation of our online offering (Art. 6(1)(f) GDPR). Since Umami works without cookies and does not process personal data for the purpose of recognition, no consent is required.

7. Fonts

This website uses the fonts “Inter” and “PT Serif”. The fonts are delivered locally from our server (self-hosting via Next.js font optimisation). No connection to third-party servers (e.g. Google) is established; no data is transferred to third parties.

8. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

9. Currency and changes to this privacy policy

This privacy policy is currently valid. As our website develops further or due to changed statutory or regulatory requirements, it may become necessary to amend this privacy policy.