Privacy policy

1. Data controller

2. What data we collect

We only collect personal data that you actively provide to us, or technical data strictly necessary to serve this website.

2.1. Contact forms

• Name
• Email address
• Any message content you choose to send us
• Optionally, organisation name and context

2.2. Newsletter

• Email address
• Consent status and timestamp

2.3. Server logs (automatic)

• IP address (anonymised as soon as possible)
• Date and time of access
• Referrer URL, user agent
• HTTP status and transferred volume

3. Purpose and legal basis

• Responding to inquiries, GDPR Art. 6 (1) (b), performance of a request, and Art. 6 (1) (f), legitimate interest in replying to contacts.
• Newsletter subscription, GDPR Art. 6 (1) (a), your explicit consent, revocable at any time.
• Site operation and security, GDPR Art. 6 (1) (f), legitimate interest in a stable, secure service.

4. Retention periods

• Contact messages are kept only as long as needed to handle the request, and then deleted or archived, typically within 12 months.
• Newsletter data are kept until you unsubscribe.
• Server logs are deleted after a maximum of 30 days, except where a security incident requires a longer retention.

5. Your rights

Under GDPR, you have the right to,

• access the data we hold about you (Art. 15),
• request rectification of inaccurate data (Art. 16),
• request erasure (Art. 17),
• request restriction of processing (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw consent at any time, without affecting past lawful processing (Art. 7 (3)),
• lodge a complaint with a supervisory authority, in Germany typically the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI).

6. Hosting and third parties

This site is served by [hosting provider, e.g. OVH, Netlify, Vercel]. Data may be processed within the EU. We rely on the following third-party services, all bound by Data Processing Agreements,

• [Formspree or equivalent], form processing, data transferred to the provider only when a form is submitted.
• [None at the moment for analytics.]

7. Cookies

This site uses no tracking cookies. Only a single functional preference is stored locally in your browser to remember your black and white mode choice. See the Cookies page for details.

8. Data security

We protect your data with modern technical and organisational measures, HTTPS end-to-end, restrictive security headers (CSP, HSTS, X-Frame-Options), and minimal data collection by design.

9. Changes to this policy

This policy may be updated to reflect changes in the service or the law. The date of the last update is shown below.

Last updated, April 2026.