Privacy Policy
How we process personal data on this website, in accordance with the EU General Data Protection Regulation (GDPR).
Last updated: 2026-07-15
Controller
The controller responsible for data processing on this website (Art. 4(7) GDPR) is:
Overview
We process personal data only where necessary to operate this website securely or to respond to your inquiries. The specific processing activities, the service providers involved, and the applicable legal bases are described below. We do not sell personal data and do not use it for advertising.
Hosting and Server Logs
This website is hosted by Vercel Inc. (USA). When you visit the site, Vercel processes connection data — including your IP address, the date and time of the request, and browser and operating system information — in server log files, as technically necessary to deliver the website securely. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR). Vercel acts as our processor under a data processing agreement (Art. 28 GDPR); transfers to the USA are safeguarded by the EU Standard Contractual Clauses.
Web Analytics
We use Vercel Web Analytics to measure site usage in aggregate form. It does not set cookies and does not track visitors across websites; visitor identifiers are anonymized and no usage profiles are created. The legal basis is our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).
Contact Form and Email
If you contact us via the contact form or by email, we process the information you provide (email address, message content) together with technical metadata (IP address, time of submission, language setting) in order to answer your request and to prevent abuse (rate limiting, spam protection). Messages are delivered via the email service Resend, Inc. (USA); rate-limiting data is stored briefly with Upstash, Inc. (USA). Both act as processors under Art. 28 GDPR. The legal bases are Art. 6(1)(b) GDPR (communication initiated by your request) and Art. 6(1)(f) GDPR (abuse prevention). We retain correspondence only as long as needed to handle your request, unless statutory retention obligations apply.
Cookies
This website does not set cookies that require consent and does not use third-party tracking cookies. For this reason, no cookie consent banner is shown.
Your Rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR); for us, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.