Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Hosting and Server Log Files

This website is hosted by Vercel Inc.. Vercel provides the technical infrastructure, content delivery network and delivery of the website.

When you simply access the website, Vercel processes technically required connection data, in particular your IP address, date and time of access, requested file or URL, referrer URL, browser and operating system information, as well as technical log and telemetry data.

Processing takes place for the provision of the website, system security, troubleshooting and abuse prevention on the basis of Art. 6(1)(f) GDPR. To the extent that access to information on the end device is strictly necessary for technical operation, it is based on Section 25(2) No. 2 TDDDG.

According to Vercel, personal information is retained only for the minimum period necessary to fulfil legal and contractual obligations and legitimate business purposes. Processing may also take place in the United States and other third countries. Further information can be found in Vercel's Privacy Policy.

3. Technically Necessary Storage on Your Device

This website uses browser storage to provide requested functions and to document your privacy preferences.

• lang: stores the language you selected.
• pp_cookie_consent: stores your selection in the cookie banner.

Where technically strictly necessary, storage is based on Section 25(2) No. 2 TDDDG. Subsequent processing takes place to provide the requested function and to document your selection on the basis of Art. 6(1)(f) GDPR and Art. 6(1)(c) GDPR.

4. Contact by Email or Phone

If you contact me by email or phone, I process your details and the content arising during the communication in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry concerns the initiation or performance of a contract; otherwise Art. 6(1)(f) GDPR based on my legitimate interest in organised communication with prospective and existing clients.

5. Contact Form and Report Download via Formspree

If you use the contact form, the data you enter, in particular your name, email address, area of interest and message, as well as technical request metadata, will be processed. For the report download, your name and email address, the time, the URL of the page visited and technical metadata are processed to provide the requested report and inform me about the download. A hidden anti-spam field is also used to detect abusive entries. The details are not used for newsletters or other marketing purposes.

I use Formspree for the technical delivery of contact form submissions. For report downloads, the submission is first validated through a server-side Vercel Function; the requested report is only delivered after successful transmission to Formspree. According to Formspree, the service is operated on AWS in the United States; for data transfers from the EU, Formspree refers to Standard Contractual Clauses.

The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry concerns pre-contractual communication, contract performance or provision of the requested report; otherwise Art. 6(1)(f) GDPR. If information is technically accessed or stored on the end device, this only takes place to the extent technically necessary under Section 25(2) No. 2 TDDDG.

6. Appointment Booking via Calendly

This website contains an external link to Calendly. Only when you actively click this link will you leave this website and be redirected to a booking page operated by Calendly.

The booking link contains a general identifier for the website landing page used (UTM parameter). It does not contain a search query, user ID or any other individually assigned identifier. When the link is clicked, this page identifier is transmitted to Calendly together with the usual connection data and may be associated there with a subsequent booking.

When you open the Calendly page, Calendly processes technical connection data. If you book an appointment there, Calendly also processes the booking data you enter. According to Calendly, data may also be transferred to third countries, in particular the United States; Calendly refers to, among other things, the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

Booking and attribution data is retrieved through a protected, read-only Calendly interface. Personal fields in the interface response are not copied into reporting files. Only aggregated counts per landing page and reporting period are stored locally. No attribution to specific search queries or individual website visits takes place.

The legal basis for the appointment booking itself is generally Art. 6(1)(b) GDPR. Providing the booking link and producing aggregated effectiveness reports are based on Art. 6(1)(f) GDPR; the legitimate interest lies in user-friendly appointment scheduling and privacy-conscious improvement of information and booking journeys.

7. Consent-Based Analytics with PostHog

If you consent to the “Statistics” category in the cookie banner, PostHog is loaded. The provider is PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. The EU Cloud with data processing in Frankfurt am Main is used.

Only the path of the page viewed, the language version and, when a Calendly link is clicked, its general placement on the page are recorded. Technically necessary connection data is also processed. Page content, form entries, search terms from the URL, full URLs, names and email addresses are not transmitted.

PostHog is configured in cookieless mode. Autocapture, session recordings, heatmaps, performance and error capture, surveys, feature flags and person profiles are disabled. PostHog does not store a persistent identifier in the browser. Only aggregated counts per page and reporting period are used locally for effectiveness reporting.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with future effect via the cookie settings in the footer. No new analytics events will then be captured. Further information can be found in PostHog's Privacy Policy.

8. Locally Hosted Fonts and External Links

The fonts used on this website are served locally from the website's own webspace. No connection to external font CDNs or Google Fonts is established.

This website also links to external services, in particular LinkedIn and Calendly. Data is therefore generally only transmitted to the respective provider once you actively click the relevant link.

9. Recipients of Data

• Hosting provider: Vercel Inc.
• Formspree: technical service provider for contact form and report downloads
• Calendly: external service for appointment booking when the booking link is used
• PostHog: consent-based, privacy-conscious analytics via the EU Cloud

10. Retention Period

Unless otherwise stated in the individual sections, I store personal data only for as long as this is necessary for the respective purposes or as long as statutory retention obligations exist.

11. Your Rights

Within the scope of the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to certain processing operations. You may revoke any consent at any time with effect for the future.

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Saxon Data Protection and Transparency Commissioner
Devrientstraße 5
01067 Dresden, Germany

13. Provision of Data / No Automated Decision-Making

The provision of personal data is not legally required. However, it may be necessary in order to process enquiries or booking requests. No automated decision-making, including profiling, takes place on this website.