Privacy policy
Draft, not legal advice. This text describes how the site is built. It must be reviewed and completed (for example with a generator from a German data protection provider, or by a lawyer) and must match the services you actually enable before launch. Remove sections for services you don't use.
Who is responsible
The controller under the GDPR is Placeholder: full legal name or company name, see the legal notice for the address. Contact: [email protected].
Overview
This site sets no cookies of its own and loads no third-party services until you choose to use one (a booking calendar or a video). Fonts are served from this site, not from Google.
Hosting and server logs
The site is hosted by Placeholder: hosting provider, e.g. Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit a page, the host processes your IP address, the requested URL, date and time, referrer and browser information to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Placeholder: log retention period and data processing agreement with the host
Contact form and email
If you use the contact or topic form, the details you enter (email, optional name and store URL, your message) are sent to me by email through Resend (Resend, Inc., USA) so I can reply (Art. 6(1)(b) and (f) GDPR). Placeholder: legal basis for the transfer to the USA (e.g. EU-US Data Privacy Framework or standard contractual clauses) and retention period If you email me directly, I process your email in the same way.
Booking calendar (Calendly)
The booking calendar is provided by Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. It is only loaded when you click “Show the calendar here” or open the booking link. Calendly then receives your IP address and browser data and may store cookies or similar information on your device. This happens only with your consent, which you give by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
If you book a call, Calendly processes the details you enter (name, email address, any notes and the time you choose) on my behalf to schedule the call and send confirmations and reminders (Art. 6(1)(b) GDPR). For this, Calendly acts as my processor under its Data Processing Addendum (Art. 28 GDPR). I delete booking details once they are no longer needed for the call and any follow-up, unless statutory retention obligations apply.
Calendly processes data in the USA. Calendly, LLC is certified under the EU-U.S. Data Privacy Framework, so transfers are based on the European Commission's adequacy decision (Art. 45 GDPR). Calendly's Data Processing Addendum provides the EU Standard Contractual Clauses as a fallback. Calendly's EU representative can be reached at [email protected]. More information: Calendly privacy notice.
YouTube videos
Videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and only load when you click play. Until then, the thumbnail is served from this site. When you play a video, Google Ireland Limited receives your IP address and browser data and may store information on your device (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
Analytics
This site does not use analytics or tracking tools.
External links
Links to the Shopify App Store, LinkedIn, YouTube and GitHub open those websites. Their own privacy policies apply once you are there.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interests (Art. 15 to 21 GDPR). You can withdraw consent at any time with effect for the future. You can also complain to a data protection supervisory authority, for example the one in your federal state.