Privacy Policy

Controller within the meaning of Art. 4 (7) GDPR is:

Robert Heine
Wekeln 24, 47877 Willich, Germany
Email: robert@n3urala1.com

A Data Protection Officer is not required by law in our case (§ 38 BDSG — the threshold of 20 persons regularly processing personal data is not reached). For privacy inquiries please contact the address above.

We process personal data only as far as necessary to provide a functional website and our content and services, or where you have consented (Art. 6 (1) GDPR).

On every visit, technical data (IP address, date and time, requested URL, referrer, user-agent, HTTP status code) are briefly processed by our hosting provider Vercel to ensure technical operation.

Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in operational security and abuse prevention).
Retention: typically up to 30 days by the hosting provider.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”).

Each request transmits the data described in section 4 to Vercel and is processed in the United States.

Legal basis for the transfer: Art. 45 GDPR in conjunction with the European Commission’s adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework, “DPF”). Vercel Inc. is certified under the DPF (see dataprivacyframework.gov/list).

Note: The DPF is an adequacy decision that may be revoked in the future by a ruling of the Court of Justice of the European Union. As a fallback we rely on Standard Contractual Clauses pursuant to Implementing Decision (EU) 2021/914.

We use cookies and similar technologies only where strictly necessary (§ 25 (2) no. 2 TDDDG) or where you have consented (§ 25 (1) TDDDG, Art. 6 (1)(a) GDPR).

Strictly necessary cookies:

• consent-v1 — stores your cookie choice (proof under Art. 7 (1) GDPR). Retention 180 days.
• kunden_unlock_<project> (client portal only) — HMAC-signed session cookie after PIN login, one per project slug. Retention until logout, max. 30 days.

You can withdraw or change your consent at any time via the “Cookie Settings” link in the footer.

With your consent we use Google Analytics 4 to measure usage. Provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; data is also processed by Google LLC, USA.

Data collected: pseudonymous identifier (cookie), truncated IP address (anonymize_ip = true), device and browser information, pages visited, dwell time.

Purpose: statistical analysis to improve our offering.

Legal basis: Art. 6 (1)(a) GDPR, § 25 (1) TDDDG (consent).

Third-country transfer: processing also in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (see dataprivacyframework.gov/list).

Retention: by default up to 14 months, depending on the Google Analytics account configuration.

Withdrawal: at any time via the “Cookie Settings” link in the footer. The lawfulness of processing prior to withdrawal is unaffected.

We use the “Inter” typeface. It is downloaded at build time via next/font and served from our own server. No connection to Google Fonts and no third-country transfer occur at runtime.

Clicking “Book a free call” redirects you to a Google booking page (calendar.app.google). Only there and only on active use will data be transmitted to Google. The Google Privacy Policy applies.

If you contact us by email, we process your data to respond to your request.

Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures) or Art. 6 (1)(f) GDPR (legitimate interest in handling general inquiries).
Retention: until your inquiry is finally resolved, no longer than required by statutory retention obligations.

The footer and subpages link to external profiles on LinkedIn and GitHub. No embedding takes place — only on click are you redirected to the third-party site, where their privacy policy applies.

Under the GDPR you have, in particular, the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR), with future effect

To exercise these rights please contact: robert@n3urala1.com.

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4, 40213 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de
Web: www.ldi.nrw.de

No automated decision-making within the meaning of Art. 22 GDPR takes place.

We update this policy whenever the underlying processing changes or new legal requirements demand it. On material changes the cookie banner will appear again.