Privacy policy

1. Controller

2. Overview

This website is deliberately lean: no analytics or tracking services are used and no advertising cookies are set. Personal data is processed only where necessary to operate the site and respond to your enquiries.

3. Hosting and server logs

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the site, Vercel automatically processes technical data (IP address, date and time, page requested, browser type, referrer) required to deliver and secure the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). Transfers to the USA are based on the EU Standard Contractual Clauses and Vercel’s certification under the EU-US Data Privacy Framework. Log data is deleted automatically after a short period.

4. Contact form and email

If you use the contact form, your name, email address and message are processed in order to respond to your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).

• Storage: The enquiry is stored in a database operated by Supabase Inc. (server location Frankfurt am Main, Germany).
• Notification: The email service Resend (Resend Inc., USA) is used to deliver the enquiry to my inbox. Transfers are based on the EU Standard Contractual Clauses.
• Deletion: Enquiries are deleted once they have been fully processed and no statutory retention obligations apply.

5. Cookies and local storage

Only technically necessary settings are stored, for which no consent is required (§ 25 (2) no. 2 TDDDG):

• NEXT_LOCALE (cookie): remembers the selected language.
• theme (local storage): remembers your choice between light and dark mode.

6. External links

This website links to LinkedIn. When you click such a link you leave my website and the privacy policy of the respective provider applies. No social media plug-ins are embedded.

7. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

8. Last updated

This privacy policy was last updated on 2026-10-23.