Privacy

TODO — name, legal form, address and email of the controller.

TODO — data protection officer, if one is appointed.

TODO — rights of access, rectification, erasure, restriction, objection, data portability and complaint to a supervisory authority.

TODO — hosting provider, location, what log data is stored and for how long.

TODO — the newsletter signup stores first name, last name and email address in a database hosted by Supabase (processor); notification and confirmation emails are sent via Resend (processor). Name legal basis, retention and how to unsubscribe.

TODO — the contact form transmits the details entered, stores them in the same database and sends the message by email via Resend. Name legal basis and retention.

TODO — forms are protected by Google reCAPTCHA (invisible v3) to detect automated submissions. Name the provider, the data transmitted, legal basis and transfer outside the EU.

TODO — the site loads Poppins and further typefaces from Google Fonts, which transmits the visitor's IP address to Google. Name legal basis and third-country transfer.

TODO — which cookies or local storage entries are set and for what purpose.

TODO — list all processors and the agreements in place (Supabase, Resend, Google).

TODO — how and when this policy is updated.