Privacy policy

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Felix von dem BergePhone: +49 1512 7729323Email: felix@von-dem-berge.com

No data protection officer has been appointed, as the legal requirements for doing so (section 38 BDSG) are not met. If you have questions about data protection, please use the contact details above.

2. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal email to the address above is sufficient. Regardless of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the one for the federal state in which I reside:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg

3. Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on that provider's servers. The provider is:

Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA

The provider is used to make this website available securely, quickly and reliably. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.

Vercel operates a global server network and also processes the data arising when you visit the site on servers in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework; transfers are based on that framework and, in addition, on the European Commission's standard contractual clauses (Art. 46 GDPR). A level of data protection fully equivalent to the European one cannot be guaranteed for processing in the USA; in particular, access by US authorities cannot be ruled out.

4. Server log files

When you visit this website, the hosting provider automatically collects information transmitted by your browser (so-called server log files):

• the page or file requested
• date and time of access
• amount of data transferred and notification of successful retrieval
• browser type and version
• operating system used
• referrer URL (the previously visited page)
• IP address

This data is not merged with other data sources and is not used to identify you personally. Processing is based on Art. 6 (1) (f) GDPR; the legitimate interest lies in the technically error-free operation and the security of the website. The retention period follows Vercel's own settings; on the Hobby plan used here, runtime logs are discarded after roughly one hour.

5. Contact form and contact by email

If you write to me via the contact form or by email, I process the data you provide — name, email address and your message — solely to handle your enquiry and any follow-up questions. The data is not passed on to third parties, apart from the delivery provider named below.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). Your data remains stored until you ask me to delete it or the purpose ceases to apply; mandatory statutory retention periods — in particular under commercial and tax law — remain unaffected.

For the technical delivery of form messages I use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor. The data you enter is transmitted to servers in the USA. This transfer is based on the European Commission's standard contractual clauses (Art. 46 GDPR) and a data processing agreement pursuant to Art. 28 GDPR.

On this page and in the legal notice, a separate form lets you request my postal address. It processes your first name, last name, email address and the reason you give — solely to decide on the request and to reply to you. The legal basis and delivery path are the same as described in this section.

Both forms contain an additional field, invisible to you, that helps block automated spam submissions. No further personal data is collected by them.

6. Cookies

This website uses no tracking, advertising or analytics cookies. Only one strictly necessary cookie is set:

• locale — stores the language you selected (German or English) so the site appears in the right language on every visit. Lifetime: 1 year. No data is transmitted to third parties.

This cookie is strictly necessary for a function you explicitly requested, so storing it does not require consent under section 25 (2) no. 2 TDDDG. The legal basis for the associated processing is Art. 6 (1) (f) GDPR. You can delete or block cookies at any time in your browser settings; the language choice then falls back to your browser's language preference.

7. Language and browser settings

As long as no language cookie is set, the language preference sent by your browser (Accept-Language header) is evaluated in order to serve the site in a suitable language. This evaluation happens only while the page is being served; the header itself is not stored.

8. Fonts

This website uses the typefaces Fraunces, Inter and JetBrains Mono. The font files are downloaded at build time and served from this server. Visiting the site therefore establishes no connection to Google servers, and no IP address is transmitted to Google.

9. No analytics or tracking services

This website uses no web analytics services, no retargeting, no social media plugins and no embedded third-party content. No profiling or automated decision-making takes place.

10. Links to external services

The site contains links to external profiles, for example on LinkedIn and GitHub. These are plain hyperlinks — no data is transmitted to those providers unless you click the link. Once you do, the privacy policy of the respective provider applies.

11. Encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar and by the padlock icon. When encryption is active, the data you send me cannot be read by third parties.

12. Changes to this privacy policy

I update this privacy policy whenever changes to the website or to the legal situation make it necessary. The version published here applies to each new visit.