Privacy

Draft, to be reviewed before launch. The server’s provider and location are still to be added.

Who is responsible

Lennart Hennig, Humboldtinsel 55, 13507 Berlin, Germany. Email: lennart@lennarthennig.com. The legal basis references below are to the EU General Data Protection Regulation (GDPR).

Hosting and server logs

The site runs on my own server, managed with Coolify. When you open a page, the server processes the technical data your browser sends with every request: IP address, date and time, the page requested, the referring page, and your browser and operating system. This is needed to deliver the site and keep it secure (Art. 6 (1) (f) GDPR). Server logs are kept only as long as operations require and are then deleted.

Content delivery network

Every page and file is delivered through Bunny (BunnyWay d.o.o., Ljubljana, Slovenia), a content delivery network in the EU. Bunny processes the same technical request data on my behalf, under a data processing agreement. Its logs anonymize IP addresses and are deleted after three days.

Visit counts

I count visits with Umami, which runs on my own server. Umami sets no cookies and stores no IP addresses. It records which pages are viewed, the referring site, the browser, operating system, device type, and country, in a form that can’t be traced back to you. The data stays on my server and isn’t shared with anyone (Art. 6 (1) (f) GDPR).

Cookies

None. Nothing on this site stores information on your device.

Fonts

The fonts are served from this site’s own server. Your browser makes no requests to Google or any other font service.

The contact form

When you send the form, I receive your name, your email address, your message, and anything else you choose to fill in. I use them only to answer you and, if we decide to work together, to prepare that (Art. 6 (1) (b) GDPR). The message is delivered to my inbox by Resend (Resend, Inc., USA). The email is sent from Resend’s region in Ireland, but Resend stores account data in the United States. That transfer is covered by my data processing agreement with Resend. I keep messages as long as our correspondence needs them and delete them once they are no longer needed, unless the law requires me to keep them longer, for example as business correspondence.

Booking a conversation

Booking runs through Cal.com (Cal.com, Inc., USA). Nothing from Cal.com loads on this site: the booking page opens only when you choose it. When you book, Cal.com processes your name, email address, the time you choose, and any note you add, on my behalf and under a data processing agreement, to schedule our conversation (Art. 6 (1) (b) GDPR). Cal.com’s own privacy policy applies on its pages.

Your rights

You have the right to access the data I hold about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable form, and to object to processing based on legitimate interests. To use any of these rights, write to me at the address above.

You can also complain to a data protection authority. Mine is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.