Datenschutz

This policy explains which personal data we process when you use this website, why we process it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

[to be completed]
[to be completed], [to be completed], [to be completed]
Email: [to be completed]

2. Hosting and server logs

This website is hosted by Vercel Inc. When you visit it, technically necessary data is processed - IP address, date and time, requested page, browser and operating system - to deliver the site and protect it against misuse. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, functioning website). Vercel may process data in the USA; transfers are based on the EU-US Data Privacy Framework and/or standard contractual clauses.

3. Contact form

When you send an inquiry, we process the details you provide: name, email address, and optionally phone number and company, your area of interest and your message. We use them only to handle your inquiry.

• Legal basis: Art. 6 (1)(b) GDPR (steps prior to a contract) and Art. 6 (1)(f) GDPR (answering business inquiries).
• Storage: inquiries are stored in a database operated by Neon Inc. and delivered to our inbox by Resend (email delivery).
• Retention: inquiries are deleted automatically after 12 months, unless a business relationship follows or statutory retention obligations apply.
• We do not store your IP address in plain text. For abuse protection, only a one-way hash is kept.

4. Spam and abuse protection

Forms are protected by Cloudflare Turnstile, which checks whether a request comes from a person. Turnstile processes technical information such as IP address and browser characteristics. Legal basis: Art. 6 (1)(f) GDPR (protection against automated abuse). We also apply rate limits using hashed identifiers, deleted after 24 hours.

5. Newsletter

If you subscribe to updates, we store your email address and the time and wording of your consent. Subscription uses double opt-in: you are only subscribed after confirming the link we send. Unconfirmed requests are deleted after 7 days. Legal basis: Art. 6 (1)(a) GDPR. You can withdraw consent at any time using the link in every email or by contacting us; your address is then deleted.

6. Cookies and similar technologies

This website uses only technically necessary storage. We do not use analytics or marketing trackers unless you consent. If such tools are introduced, they will only run after your consent, and your decision is recorded as proof of consent for 36 months. See the cookie policy.

7. Fonts

Fonts are served from our own servers. No connection to external font services is made when you visit this site.

8. Recipients and processors

Data processing agreements are in place with these providers.

9. Your rights

• Access to your data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent at any time, with effect for the future (Art. 7 (3) GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

10. Deleting your data

To have your data deleted, write to [to be completed] from the email address you used. We confirm your request, delete the inquiry, subscription and any related records within 30 days, and let you know once it is done. Data subject to statutory retention obligations is restricted instead of deleted until those obligations end.