← go back

Privacy Policy

Information on the processing of personal data according to DSGVO Art. 13.

Controller

This website is operated by a natural person.
Alexander Lowa
Landhausstraße 3c
01067 Dresden
Germany
For privacy questions, write us.

Data protection officer

We have not appointed a data protection officer. Our processing does not meet the thresholds in DSGVO Art. 37 that would require us to do so.

What we process and why

We process personal data only where a legal basis under DSGVO Art. 6(1) applies. The two categories below cover everything we do.

Website hosting

This website is hosted by Vercel Inc. (“Vercel”). When you load any page, Vercel’s edge network automatically receives a request that includes your IP address, the date and time of the request, the URL requested, the page that linked to ours (if any), and your browser’s user-agent string. The domain itself is registered through GoDaddy.com, LLC, which acts only as our domain registrar and is not involved in serving page content.

The request data is stored briefly in Vercel’s server logs to deliver the page and to detect technical errors and abuse. Legal basis: Art. 6(1)(f) DSGVO — our legitimate interest in operating a functional, secure website. Retention: as configured by Vercel’s defaults; we do not retain copies.

Vercel is headquartered in the United States. While requests from European visitors are typically served from Vercel’s European edge nodes, log data may be aggregated on US-based infrastructure. Vercel publishes standard contractual clauses as the legal mechanism for international transfers under DSGVO Art. 46. You can review Vercel’s privacy practices at vercel.com/legal/privacy-policy.

Email contact

If you send us an email, we receive your address, your name (if you provide one), and the content of your message. We use this only to reply to you and to handle the matter you wrote about.

Legal basis: Art. 6(1)(b) DSGVO if your message concerns a contractual relationship (for example, a job application); otherwise Art. 6(1)(f) — our legitimate interest in answering correspondence.

Retention: we keep your message for as long as we need to handle the matter, plus a reasonable period afterwards. Job application materials are kept for the duration of the process plus six months (to defend against claims under the AGG within the statutory claim period), then deleted. Other inquiries are deleted when no further follow-up is needed and no statutory retention applies.

Cookies, analytics, tracking

We do not set any cookies on this website. We do not use tracking pixels, advertising trackers, or third-party profiling techniques.

We use Vercel Web Analytics to understand aggregate traffic patterns (page views, referrers, approximate visitor counts). Vercel Web Analytics is designed to be privacy-friendly:

  • no cookies are set and no data is stored on your device;
  • no persistent identifiers or cross-site tracking;
  • visitor sessions are represented by a short-lived, salted hash derived from your IP address and user-agent, which resets daily and cannot be linked back to you.

Legal basis: Art. 6(1)(f) DSGVO — our legitimate interest in understanding how our website is used in order to improve it, without identifying individual visitors. Because no information is stored on your device, consent under § 25(1) TTDSG / TDDDG is not required (§ 25(2) TTDSG exception for strictly technical/aggregate measurement that does not identify users).

You can review Vercel’s privacy practices and data processing details at vercel.com/docs/analytics/privacy-policy. No cookie banner is shown because no consent is required for the processing described here.

Third-party content on this website

  • Fonts. All fonts are self-hosted. No requests are made to Google Fonts or any other font provider when you load this site.
  • LinkedIn link. Our footer links to our company page on LinkedIn. When you click that link, your browser navigates to LinkedIn’s domain, where their own privacy policy applies. No LinkedIn scripts, pixels, or other content are loaded on our own pages.

International data transfers

The only processor that may handle personal data on our behalf is Vercel Inc. (hosting and Web Analytics), which may process data on servers located in the United States under standard contractual clauses (DSGVO Art. 46). We do not engage any other processors for this website.

Your rights

Under DSGVO you have the right to:

  • access the personal data we hold about you (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased, subject to legal retention obligations (Art. 17);
  • restrict our processing (Art. 18);
  • receive your data in a structured, machine-readable format (Art. 20);
  • object to processing based on legitimate interests (Art. 21);
  • withdraw consent at any time, where applicable (Art. 7(3)).

We respond within one month, in line with DSGVO Art. 12(3). To exercise any of these rights, write us.

Right to complain

You may also file a complaint with a supervisory authority if you believe our processing violates DSGVO (Art. 77). The competent authority for our location (Dresden, Saxony) is the Sächsische Datenschutz- und Transparenzbeauftragte: datenschutz.sachsen.de.

Updates to this policy

We may update this notice when our processing changes. The current version is the one shown on this page.

Contact

For any privacy-related question or to exercise the rights above, write us.