# Privacy notice

## Controller

Thomas Breindl, Passau, Germany, [contact@thomasbreindl.me](mailto:contact@thomasbreindl.me).

## Hosting

Vercel Inc. (USA) hosts the site and processes your IP address, request time, URL, referrer, and user agent to deliver pages and protect them against abuse (Art. 6(1)(f) GDPR). Vercel acts under a data processing agreement and is certified under the EU-U.S. Data Privacy Framework. Request logs are deleted after one day at most.

## Analytics

PostHog counts visits in cookieless mode, so nothing is stored in your browser. It records the pages you view, where you came from, the links you click, how far you scroll, JavaScript errors, and page speed, to improve the site (Art. 6(1)(f) GDPR). PostHog Inc. (USA) processes this data under a data processing agreement on servers in Frankfurt, does not store your IP address, and keeps events for the retention period of its plan.

## Email

If you email Thomas, he uses your message to reply (Art. 6(1)(b) or (f) GDPR) and deletes it once it is no longer needed. Mail is hosted by Proton AG in Switzerland.

## Your rights

You can request access to, correction, deletion, or restriction of your data, and a portable copy of it, by email. You can also complain to a data protection authority, such as the Bayerisches Landesamt für Datenschutzaufsicht.

**Right to object:** you may object at any time to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation.