Privacy Policy

The following notes provide an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

I am responsible for data collection on this website. You can find my contact details in the section “Note on the controller”.

Your data is collected when you provide it to me, for example via the contact form. Other data is collected automatically when you visit the website, mainly technical data such as IP address, browser type, or time of access.

Some data is collected to ensure the website functions correctly. You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority.

This website is hosted externally by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Content is delivered worldwide via the Vercel Edge Network (CDN) to reduce loading times.

When you visit the site, personal data (in particular IP address, time of access, requested files, and technical device information) is processed in server log files and stored on the host’s servers.

Hosting is carried out in the interest of secure, fast, and efficient provision of my online offering (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent may be withdrawn at any time.

My host processes your data only to the extent necessary to fulfil its obligations and follows my instructions. A data processing agreement with Vercel applies under its Data Processing Addendum (DPA), incorporated into Vercel’s terms of service (https://vercel.com/legal/dpa).

More information: https://vercel.com/legal/privacy-policy

I treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Controller: Moritz Günther, Güldenboden 2, 29439 Lüchow (Wendland), Germany. Email: info@moritz-guenther.com. Phone: +49 176 60143985.

Unless a more specific retention period is stated, personal data remains with me until the purpose of processing no longer applies. Upon withdrawal of consent or a legitimate request for erasure, data is deleted unless statutory retention obligations apply.

Where you have consented to processing, I process your data on the basis of Art. 6(1)(a) GDPR. For contract performance or pre-contractual measures on Art. 6(1)(b) GDPR. For compliance with legal obligations on Art. 6(1)(c) GDPR. On the basis of legitimate interests on Art. 6(1)(f) GDPR, provided your interests do not override mine.

In the course of my activities I work with processors. I only disclose personal data where necessary for contract performance, required by law, or permitted on the basis of a valid DPA.

You may withdraw consent at any time. The lawfulness of processing carried out before withdrawal remains unaffected.

WHERE PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. WHERE DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME.

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, https://lfd.niedersachsen.de. You also have the right to data portability and to access, rectification, and erasure of your data. The right to restriction of processing applies in the cases provided by law.

Cookies: This website uses cookies, small text files stored on your device. Necessary cookies are required for operation (Art. 6(1)(f) GDPR). Analytics cookies are only set with your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can change your choice at any time via the “Cookie settings” link in the footer.

For consent management I use vanilla-cookieconsent. It is bundled locally; no data is transmitted to the tool provider.

You can configure your browser to notify you about cookies or to reject cookies generally. Disabling cookies may limit functionality.

When you use the contact form, I process the data you provide (name, email address, selected subject, optionally selected package, message) to handle your inquiry and any follow-up questions. I do not share this data without your consent.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) where your inquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).

Emails are sent via Resend (Plus Five Five, Inc. / Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the form data as a processor solely for the purpose of sending emails. A data processing agreement with Resend applies under Resend’s DPA, effective upon registration of a Resend account (https://resend.com/legal/dpa).

After submitting the form, you will receive an automatic confirmation email at the address you provided. This serves solely as proof that your inquiry was received.

Data remains with me until you request erasure, withdraw consent, or the purpose no longer applies (e.g. after your inquiry has been handled). Emails in my inbox are generally deleted after the inquiry has been resolved, unless statutory retention obligations apply.

If you contact me by email or phone, I store and process your details, including any personal data arising from the enquiry, in order to handle your request.

The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Data remains with me until the purpose no longer applies or you request erasure, unless statutory retention obligations apply.

If you consent in the cookie settings, anonymised web analytics may be used in future to understand how the website is used. No analytics service is currently active. Without consent, no tracking takes place.

This website uses Google Fonts (DM Sans, Inter, JetBrains Mono) for consistent typography. Font files are bundled locally and served via my web host. No connection to Google servers is established when you visit the site.

More information: https://developers.google.com/fonts/faq and https://policies.google.com/privacy

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by “https://” in the address bar and the lock icon in your browser. When encryption is active, data you transmit cannot be read by third parties.

My hosting provider Vercel and email service Resend are based in the USA. Data is transferred on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation) and, where required, Standard Contractual Clauses (SCC) under Art. 46(2)(c) GDPR as agreed in the respective data processing agreements (DPAs).

Despite contractual safeguards, access by authorities in third countries cannot be entirely ruled out. You have the right to request a copy of the safeguards or to contact the competent supervisory authority.