Privacy Policy

Protecting your personal data matters to me. This website is a static, data-minimal portfolio: there are no user accounts, no forms that store data, and no advertising trackers. This is a convenience translation; the German version is legally binding.

Controller

The controller for data processing on this website is Lasse Siemoneit. You can find the contact details in the Legal Notice.

Hosting on Vercel

This website is hosted and served by Vercel Inc. When the pages are accessed, Vercel, as a processor, handles technically necessary server log data (including IP address, time of the request, requested URL, volume of data transferred, browser type). This processing is required for the secure and stable delivery of the website and is based on my legitimate interest pursuant to Art. 6 (1) (f) GDPR. A data processing agreement is in place with Vercel.

Cookieless analytics

To improve the website I use Vercel Web Analytics and Vercel Speed Insights. These services operate without cookies and without cross-device tracking. No cookies are set and no profiles that remain identifiable beyond the session are created; a temporary visitor hash derived from request data is discarded after 24 hours. No personal data is passed to third parties for advertising purposes. The legal basis is my legitimate interest in statistical, data-minimal analytics pursuant to Art. 6 (1) (f) GDPR. Because no non-essential information is stored in or read from your device, no consent under § 25 TDDG is required — which is why there is deliberately no cookie banner.

Contact

If you contact me by email, I process the data you send (email address, message content) solely to handle your request. The legal basis is Art. 6 (1) (b) or (f) GDPR. The data is deleted once it is no longer needed to handle your request.

Your rights

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). An informal email to the address given in the Legal Notice is sufficient to exercise them. You also have the right to lodge a complaint with a data protection supervisory authority.