Data Protection

Privacy Policy

Last updated: March 2026

Controller

The controller responsible for data processing on this website is the entity listed in our Legal Notice. For contact details, please refer to our Legal Notice.

Data We Collect

Contact Form

When you use our contact form, we collect your name, email address, and message. This data is processed to respond to your inquiry (Art. 6(1)(b) GDPR — contract initiation).

User Account

When you create an account, we store your email address, full name, and a securely hashed password. This data is necessary to provide access to the client portal (Art. 6(1)(b) GDPR — contract performance).

When you subscribe to our newsletter, we store your email address. Newsletters are sent via Resend (Resend, Inc., San Francisco, USA), which processes your email address on our behalf as a data processor. Data transfer to the USA is covered by appropriate safeguards. You can unsubscribe at any time via the link in each newsletter. Processing is based on your consent (Art. 6(1)(a) GDPR).

Cookies

This website uses only technically necessary cookies for authentication and session management. No tracking or marketing cookies are used. These cookies are necessary for the website to function (Art. 6(1)(f) GDPR — legitimate interest).

Service Providers

We use the following third-party services to operate this website:

Vercel Inc. — Hosting and content delivery. Privacy policy: vercel.com/legal/privacy-policy
Supabase Inc. — Database, authentication, and backend services. Data is stored in EU data centers. Privacy policy: supabase.com/privacy

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, please contact us using the details provided in our Legal Notice.

Information for California Residents (CCPA)

We do not sell, rent, or share your personal information with third parties for their direct marketing purposes. California residents have the right to request disclosure of the categories and specific pieces of personal information collected. To make such a request, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.