Privacy Policy

1. Controller

2. Overview of Data Processing

The following overview summarises the types of personal data processed and the purposes of their processing.

Types of Data Processed

• Contact data (e.g. name, email, phone number)
• Content data (e.g. text inputs in forms)
• Usage data (e.g. pages visited, access time)
• Meta/communication data (e.g. IP addresses, browser type)

3. Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Contract Performance (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract or pre-contractual measures.
• Legitimate Interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of legitimate interests pursued by the controller.

4. Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with legal requirements. All communication is TLS-encrypted.

5. Website Hosting

We use Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) for hosting our website. When you visit our website, the server automatically collects log files including: requested URL, date and time, data volume, browser type and version, operating system, referrer URL, and IP address.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technically error-free presentation and optimisation of the website).

International Data Transfers

Vercel Inc. is based in the USA. Data transfers to the USA are carried out on the basis of the EU-US Data Privacy Framework (DPF) pursuant to Art. 45 GDPR. See Vercel's Privacy Policy.

6. Contact Form and Email Communication

When you contact us via the contact form, your information (name, email, optional company, phone number, and message) is processed for the purpose of handling your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in processing customer inquiries).

Retention: Your data will be deleted after final processing of your inquiry, unless legal retention obligations apply.

Email Service: Resend

We use Resend (Resend, Inc., San Francisco, CA, USA) to deliver contact form submissions via email. Data is transmitted via their API and processed briefly for email delivery. Legal basis: Art. 6(1)(f) GDPR.

7. Cookies and Consent Management

Our website uses cookies. Technically necessary cookies (e.g. language preference, theme) are set based on Art. 6(1)(f) GDPR. For all other cookies, we obtain your consent via our cookie consent banner pursuant to Art. 6(1)(a) GDPR.

You may revoke your consent at any time via the cookie settings link in the website footer.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Object (Art. 21 GDPR)
• Right to Withdraw Consent (Art. 7(3) GDPR)
• Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

9. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services.

Last updated: July 2025