Privacy notice

1. Controller

Martin Wollank, wollank.dev
[TODO: Address]
Email: hello@wollank.dev

2. Hosting

Site is hosted with [TODO: Provider, e.g. Vercel Inc.]. Technically necessary data (IP address, timestamp, user agent) is processed on each request. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement per Art. 28 GDPR is in place.

3. Server logs

Logs contain truncated IP address, URL, referrer, user agent and status code. Deleted after [TODO: retention period]. Not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR.

4. Cookies

This site sets no tracking or marketing cookies. Only your cookie consent choice is stored in Local Storage (Art. 6(1)(f) GDPR; § 25(2) TDDDG).

5. Analytics (Swetrix)

We use Swetrix for cookieless reach measurement. Provider: Swetrix Ltd., 71–75 Shelton Street, London, WC2H 9JQ, UK. Swetrix collects no personal data, sets no cookies and does not store IP addresses persistently. Only aggregated, anonymous statistics are gathered. Legal basis: Art. 6(1)(f) GDPR. No consent required per § 25 TDDDG. Privacy notice: swetrix.com/privacy.

6. Contact form & email

Data submitted via contact form (name, email, message) is stored to process your inquiry. Legal basis: Art. 6(1)(b)/(f) GDPR. Data is deleted when no longer required, at the latest after [TODO: retention period].

7. Booking

The /booking page currently shows a demo calendar with no external connection. No data is transmitted to third parties. This section will be updated once live booking is activated.

8. Web fonts

Fonts (Geist, Fraunces) are bundled at build time via next/font and served from our own servers. No connection to Google servers occurs on page load.

9. SSL/TLS

All connections to this site are TLS-encrypted (https://).

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Requests to: hello@wollank.dev.

11. Right to lodge a complaint

You may lodge a complaint with your local supervisory authority (Art. 77 GDPR). The competent authority depends on your place of residence or our registered address.

12. Changes

This privacy notice may be updated to reflect legal or technical changes.

As of: [TODO: insert date]

This notice does not substitute legal advice. Please have it reviewed before going live.