Data protection
Privacy Policy (informal translation — the German version is legally binding)
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Jascha Schulze, [TO BE FILLED IN: address], email: [TO BE FILLED IN: contact email address].
2. General information on data processing
We only process personal data of our users to the extent necessary to provide a functioning website and our content and services.
3. Hosting
This website is hosted on servers located in Germany ([TO BE FILLED IN: name and address of the hosting provider]). The hosting provider automatically processes server log files (e.g. IP address, date and time of access, page requested) to technically provide and secure the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and functional operation).
4. Cookies
This website uses a single, strictly necessary cookie ("NEXT_LOCALE") that stores only your selected language (German, English or Spanish) for future visits. It is not used for tracking or analytics, is never shared with third parties, and expires after at most 12 months. Legal basis: § 25(2) no. 2 of the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG) in conjunction with Art. 6(1)(f) GDPR — strictly necessary cookies do not require consent.
5. Web analytics with Umami
To statistically evaluate visits to this website (e.g. page views, approximate visitor country, device type), we use the self-hosted, open-source and cookieless analytics software Umami. The Umami server runs under our own control ([TO BE FILLED IN: specific server location/provider, if different from the website's own hosting]); analytics data is not shared with any third party. Umami does not set cookies, does not build cross-device profiles, and does not store full IP addresses — these are processed only briefly to determine the approximate visitor country. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the needs-based design and ongoing improvement of this website). As this does not constitute tracking within the meaning of the ePrivacy rules, no consent is required.
6. Contact form
If you send us an inquiry via the contact form, the data you provide (name, email address, message text) is stored by us for the purpose of processing your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or, where no contractual relationship is being initiated, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
To notify us by email of incoming inquiries, we use the email delivery service Resend (Resend, Inc., USA) as a processor. The data you provide in the form is transmitted to Resend to deliver the notification email. As Resend is based in the USA, this may involve a transfer of data to a third country; this is carried out on the basis of appropriate safeguards (e.g. Standard Contractual Clauses or an adequacy decision) — [TO VERIFY: confirm the current data processing agreement / transfer safeguards with Resend before going live].
Data submitted via the contact form is deleted once it is no longer required to process your inquiry, unless statutory retention obligations apply.
7. Your rights
Subject to applicable law, you have the right to free information about your stored personal data (Art. 15 GDPR) at any time, as well as rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
8. Contact for privacy inquiries
For requests regarding access, rectification, erasure, or other privacy matters, please contact: [TO BE FILLED IN: email address for privacy inquiries, may be the same as the general contact address].
9. Changes to this privacy policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services. Your next visit will then be subject to the updated privacy policy.