Privacy Policy

This website respects your privacy. We collect and process personal data only when necessary and in accordance with the EU General Data Protection Regulation (GDPR) and applicable German laws.

1. Data We Collect

• Server logs: When you visit this website, our hosting provider Vercel may collect technical data such as your IP address, browser type, and the date and time of access.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring website security and stability).
• Analytics: We use Plausible Analytics, a privacy-focused analytics service, to understand website usage. Plausible does not use cookies and does not collect personally identifiable information. All data is anonymized and aggregated.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving website performance).
• Contact form submissions: If you send a message via the contact form, we collect your name, email address, and the content of your message. The form is processed by Formspree Inc. (USA).
  Legal basis: Art. 6(1)(b) GDPR (necessary to respond to your inquiry).

2. Use of Data

We use your data solely to:

• Operate and maintain this website
• Respond to your inquiries
• Ensure website security and troubleshoot issues

3. Third-Party Processing

• Vercel Inc. (USA) — hosting provider. Privacy Policy
• Plausible Analytics (EU) — privacy-focused analytics. No cookies, no personal data collection. Privacy Policy
• Formspree Inc. (USA) — processes contact form submissions. Privacy Policy

Vercel and Formspree may process data outside the EU/EEA. Data transfers to the USA are based on the EU Standard Contractual Clauses (SCCs) or other lawful safeguards. Plausible Analytics processes data exclusively within the EU.

4. Data Retention

• Server logs: Retained by Vercel only as long as necessary for security, troubleshooting, and compliance purposes, per their privacy policy.
• Analytics data: Plausible applies no automatic expiry to analytics data. Aggregated, anonymized statistics are therefore retained until we delete this site from our Plausible account; ceasing collection alone does not erase historical data. No personally identifiable information is stored: Plausible uses no cookies and no persistent identifiers, and the daily salt used to derive visitor hashes is rotated and deleted every 24 hours.
• Contact form submissions: Stored in our email system for as long as they remain relevant to our professional activities, so we can refer back to previous communications. You can request deletion at any time.

5. Your Rights (under GDPR)

You have the right to:

• Request access to your data (Art. 15 GDPR)
• Request correction (Art. 16 GDPR) or deletion (Art. 17 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority:Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
  Gustav-Stresemann-Ring 1
  65189 Wiesbaden, Germany
  https://datenschutz.hessen.de

6. Contact