Privacy
This is a translation for convenience. Only the German version is legally binding.
In short
This website sets no cookies and loads no content from other servers. Fonts and images are served from the same server as the site. For simple visitor statistics I use Umami on my own server in Frankfurt, without cookies and without recognising you. Contact requests are also stored on my own server.
Controller
Tayron März, Am Steinsgraben 32, 37085 Göttingen, tay@taymaerz.de
Hosting
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data such as your IP address, the time, the requested page and your browser identifier in order to deliver the site and protect it against attacks. Data may be transferred to the USA in the process; Vercel is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR) and EU Standard Contractual Clauses apply in addition (Art. 46 GDPR). A data processing agreement with Vercel is in place (Art. 28 GDPR). Vercel keeps access logs only briefly (up to 30 days depending on the plan); I do not analyse them. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in a secure, working website. More: vercel.com/legal/privacy-policy.
Contact by email or form
When you send the contact form, your name, email address, topic, message, language and (if given) who referred you are sent through a function at Vercel (see Hosting) to my own server at Datalix in Frankfurt am Main. There it is turned into a PDF that I file in my document management (Paperless-ngx), and my own notification service (ntfy) sends me a push message with your name, email address and the beginning of your message. Both run on my server; nothing goes to other services. If you email me directly, your message only lands in my inbox. Either way I only use your details to reply to your request (Art. 6(1)(b) GDPR, for general questions (f)) and delete them once they are no longer needed for that and no statutory retention periods apply.
Visitor statistics (Umami)
To see which pages get read, I use Umami. Umami runs on my own server at Datalix in Frankfurt am Main; the data is not passed on to anyone. It records the page visited, referrer, browser, operating system, device type, screen size, language and approximate country. No cookies are set and nothing is stored on your device. Your IP address is not stored; it is only combined with a random value that changes daily into an anonymous identifier, so I cannot recognise you across days or pages. If your browser sends “Do Not Track”, nothing is recorded at all. The script is served from this domain. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in improving the website. You can object at any time: via the notice at the bottom of the page (“Turn off”), via “Do Not Track” or with a content blocker. If you turn statistics off, your browser remembers that in its local storage.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time (Art. 7(3)). You can also lodge a complaint with a data protection supervisory authority (Art. 77), for example the Data Protection Commissioner of Lower Saxony, Prinzenstraße 5, 30159 Hannover. There is no automated decision-making.