Privacy policy

This notice explains which personal data is processed when you visit this website, for what purpose and on which legal basis. The website sets no cookies, uses no advertising or tracking services, loads no fonts or content from third-party servers and embeds no social media content. The German version is legally binding.

1. Controller

No data protection officer has been appointed, as there is no legal obligation to do so.

2. General

The legal framework is the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Personal data is deleted once its purpose no longer applies and no statutory retention obligations prevent deletion. Recipients are only the service providers named below, acting as processors on my instructions (Art. 28 GDPR), and my email and phone providers. There is no automated decision-making or profiling (Art. 22 GDPR).

3. Hosting and server log files (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. For every page request, Vercel processes technically necessary data: IP address, date and time, requested URL, referrer, browser and operating system information, to deliver the website securely and reliably and to defend against attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure website). A data processing agreement is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR), supplemented by standard contractual clauses. Log data is stored by Vercel only briefly for operation and security and then deleted.

The connection is encrypted via TLS (HTTPS). Fonts and images are served from the same server; no data is sent to font providers or other third parties.

4. Visitor statistics (Vercel Web Analytics) – only with consent

Vercel Web Analytics is loaded only if you click “Accept” in the notice banner. It provides anonymous, aggregated statistics to improve the website: time, page visited, referrer, filtered URL parameters (e.g. “ref”), approximate location (country, region, city), device type, operating system and browser.

No cookies are set. To count unique visits, Vercel derives a hash from the request, which is discarded after 24 hours; recognition across days or websites is not possible. The script reads from your browser's local storage.

Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Recipients and transfers as in section 3. You can withdraw your consent at any time with effect for the future via the “Privacy settings” link in the footer.

5. Storing your privacy choice

Your choice in the banner (“Accept” or “Decline”) is stored with a timestamp in your browser's local storage (entry “ksmm-consent”) so the notice does not appear on every page. It never leaves your browser. You will be asked again after 12 months and can delete the entry in your browser settings at any time. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent).

6. Contact form (Web3Forms)

If you use the inquiry form, your details (name, email address, optionally company, topic, creator, budget and your message) are sent together with technical data (IP address, time, referrer) to the Web3Forms service, which forwards them to me by email. Required fields are marked; without them I cannot process your inquiry.

The provider is Web3Creative (operator of Web3Forms), based in India, with whom a data processing agreement is in place. Web3Forms uses Amazon Web Services, Cloudflare and Hetzner (EU) as infrastructure and the spam filters CleanTalk and Akismet (Automattic), which receive the IP address and email address for spam checks. Data may be transferred to third countries without an adequacy decision (India) and to the USA on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR). Web3Forms stores form data for a maximum of three years.

Legal basis: Art. 6(1)(b) GDPR where your inquiry aims at a contract, otherwise Art. 6(1)(f) GDPR (interest in answering inquiries and in spam protection). I delete your inquiry once it has been fully handled, unless statutory retention obligations apply (e.g. six years for business correspondence under § 147 German Fiscal Code).

7. Contact by email, phone or WhatsApp

If you write to or call me, I process your details to handle your request (Art. 6(1)(b) or (f) GDPR); deletion as in section 6.

The WhatsApp buttons are plain links. Only when you click them is WhatsApp opened, and WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, processes data under its own responsibility and privacy policy, possibly including transfers to Meta Platforms in the USA. If you prefer not to, you can reach me by email, phone or the form.

8. Links to social networks and websites

Links to TikTok, Instagram, YouTube and other websites are plain links. No data is sent to these providers when you visit this website; their privacy policies apply only after you click. The “Save contact” file (vCard) is served directly by this website.

9. Your rights

Under the GDPR you have the right to

• access your data (Art. 15),
• rectification (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• withdraw consent with effect for the future (Art. 7(3)).

An informal message to the contact details above is sufficient.

Right to object (Art. 21 GDPR)

Where I process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

10. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.

Last updated: October 28, 2026