Privacy Policy

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) and other applicable national data protection laws is:

Kilian Kellermann
[Street and House Number]
[Postal Code, City]
Germany
Email: hallo@kiliankellermann.de

No data protection officer has been appointed, as there is no legal obligation to do so (this is not a case of systematic, large-scale monitoring or large-scale processing of special categories of personal data under Art. 37 GDPR). For any data protection inquiries, please contact the email address above directly.

2. General Information on Data Processing

This website does not use cookies, does not use analytics or tracking services (e.g. Google Analytics, Matomo), and does not use social media plugins. No user profiling and no data sharing for advertising purposes takes place. Your language choice (German/English) is stored only locally in your browser (localStorage) and is never transmitted. The sessionStorage (key “kk-intro”) records only whether the intro animation has already played in this browser session; this is likewise never transmitted and is deleted when the browser or tab is closed.

Personal data is collected, processed, and used only to the extent necessary to provide a functioning website and its content and services.

3. Hosting (Vercel)

This website is hosted by Vercel Inc. / Vercel International B.V. ([insert full provider address if known]). Whenever this website is accessed, Vercel automatically collects technical access data ("server log files"), including:

  • IP address of the accessing device
  • Date and time of access
  • Requested file/URL and amount of data transferred
  • Browser type and version, operating system used
  • Referrer URL (previously visited page)
  • HTTP status code

This processing is based on Art. 6(1)(f) GDPR (legitimate interest) to ensure reliable and secure operation of the website, to detect misuse, and for error diagnosis. According to the hosting provider, this data is stored for a limited period and then automatically deleted; please refer to Vercel's current documentation for the exact retention period.

The contact form on this website is processed by a server function at Vercel; the data centre region is Frankfurt am Main. In the process, your name, email address, selected topic, message and IP address are processed solely for delivering your inquiry. This data is not stored on the web server. The function does not log message contents; the platform logs contain only the technical access data described above.

Because Vercel Inc. is based in the United States, personal data may be transferred to a country outside the EU/EEA (a "third country"). Such transfers rely on appropriate safeguards under Art. 44 et seq. GDPR (e.g. EU Standard Contractual Clauses and/or certification under the EU-U.S. Data Privacy Framework, where applicable). A data processing agreement under Art. 28 GDPR is in place with Vercel.

4. Fonts

The fonts used on this website (Newsreader, Manrope) are served locally from this website's own server. No request is made to any third-party server — in particular, no "Google Fonts" are loaded from fonts.googleapis.com or fonts.gstatic.com. Displaying the fonts therefore transmits no IP address to Google or any other third party. The font files are delivered by the same hosting provider as the rest of this website; Section 3 applies accordingly. The fonts are licensed under the SIL Open Font License 1.1.

5. Contact Form

When you submit the contact form, the data you enter (name, email address, selected topic, message) is transmitted over an encrypted connection (TLS) to this website's server function (Vercel, data centre region Frankfurt am Main, see Section 3). There, the input and the origin of the request are checked to protect against misuse, and the data is immediately forwarded by email (SMTP, encrypted) via my email provider mailbox.org (Heinlein Hosting GmbH, Schwedter Straße 9a, 10119 Berlin) to hallo@kiliankellermann.de. No further storage takes place apart from the email itself.

The legal basis is Art. 6(1)(b) GDPR (handling your request or pre-contractual measures) and, alternatively, Art. 6(1)(f) GDPR (legitimate interest in efficiently handling inquiries and in protecting against misuse).

To protect against automated spam submissions, the form contains a hidden additional field ("honeypot"); if it is filled in, the submission is discarded. Once forwarded, your details are handled like an email inquiry; Section 6 applies in addition.

You are not obliged to use the form: you can always write to me directly by email at hallo@kiliankellermann.de (see Section 6).

6. Email Communication

If you contact hallo@kiliankellermann.de by email, the data you provide (e.g. your email address, name, message content) will be stored for the purpose of processing your inquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to the initiation or performance of a contract, or otherwise Art. 6(1)(f) GDPR (legitimate interest in processing and responding to inquiries). I use mailbox.org (Heinlein Hosting GmbH, Schwedter Straße 9a, 10119 Berlin) as my email provider; its servers are located in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.

7. Data Security

This website uses SSL/TLS encryption to protect the transmission of confidential content (e.g. inquiries you send to the website operator). You can recognize an encrypted connection by the address bar changing from "http://" to "https://" and by the lock icon in your browser's address bar.

8. Retention Period

Unless a more specific retention period is stated in this privacy policy, personal data will be retained until the purpose for processing no longer applies. If you assert a valid right to erasure or withdraw consent to processing, your data will be deleted unless other legally permissible grounds exist for retaining it (e.g. statutory retention obligations under tax or commercial law); in the latter case, deletion will occur once those grounds no longer apply.

9. Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to the controller:

  • Right of access (Art. 15 GDPR): information about the personal data we process concerning you.
  • Right to rectification (Art. 16 GDPR): correction of inaccurate or completion of incomplete data.
  • Right to erasure (Art. 17 GDPR): under certain conditions, deletion of your data.
  • Right to restriction of processing (Art. 18 GDPR): under certain conditions, restriction of processing.
  • Right to data portability (Art. 20 GDPR): receiving your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21 GDPR): to processing carried out under Art. 6(1)(f) GDPR, on grounds relating to your particular situation.
  • Right to withdraw consent (Art. 7(3) GDPR): at any time, with effect for the future.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The competent supervisory authority for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: ldi.nrw.de

10. No Automated Decision-Making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

11. Provision of Data — Requirement or Obligation

Providing your personal data is neither legally nor contractually required. You are under no obligation to provide your data. However, without providing your data (e.g. via the contact form or by email), your inquiry cannot be processed.

12. Currency and Amendment of this Privacy Policy

This privacy policy is current as of [insert date]. Further development of this website and the technologies implemented on it or changes in legal or regulatory requirements may make it necessary to amend this privacy policy. The version currently in effect is the one published on this page.