Responsible Party

Responsible for the processing of personal data:

Data Protection Officer

A data protection officer has not been appointed, as this is not required under Art. 37 GDPR.

Contact Form

The data entered here (name, email, message) is used exclusively to answer your inquiry. Legal basis: Consent and contract fulfillment (Art. 6 para. 1 lit. a & b GDPR).

Use of Third-Party Services

This site is hosted on Vercel; I do not have direct access to server logs or your IP address. For the contact form, I use Resend to send emails. Only the data you enter in the form is forwarded – no other personal data is stored.

Log retention: max. 30 days

• Vercel: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA

  Legal basis: legitimate interests (Art. 6 para. 1 lit. f GDPR) to ensure the performance and security of the website.

  Vercel is certified under the EU-US Data Privacy Framework and processes data in accordance with its principles. Details: https://vercel.com/legal/privacy-policy.

• Resend: 2261 Market Street #5039, San Francisco, CA 94114, USA

  Legal basis: contract fulfillment (Art. 6 para. 1 lit. b GDPR), as Resend sends emails on your behalf.

  Resend uses Standard Contractual Clauses (SCC) in their DPA to legitimize data transfer to the USA. DPA: https://resend.com/legal/dpa.

Legal Basis & Third-Country Transfer

Vercel processes data on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR) and is certified under the EU-US Data Privacy Framework (see https://vercel.com/legal/privacy-policy).

Resend acts for contract fulfillment (Art. 6 para. 1 lit. b GDPR) and uses Standard Contractual Clauses for data transfers to the USA (see https://resend.com/legal/dpa).

Cookies and Local Storage

I do not use cookies. Only your language choice and theme setting are stored locally in your browser's localStorage. The storage of theme settings and language choice in localStorage is based on legitimate interests (Art. 6 para. 1 lit. f GDPR) to improve user experience. You can delete this data at any time via your browser settings.

External Links

The site contains links to external websites. Since no external content is embedded, clicking these links will redirect you to the respective platforms, whose privacy policies then apply.

Data Security

I take appropriate technical and organizational measures to protect your data from unauthorized access and loss. However, I cannot guarantee 100% security for data transmission over the Internet.

Technical-organizational measures: this site uses TLS 1.3 (if supported by the browser), access controls with MFA, pseudonymization/encryption of data at rest, and regular security audits.

Data Subject Rights

Data subjects have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and revocation of granted consents (Art. 7 para. 3). These rights can be asserted at info@timeinator.app.

Supervisory Authority

You can file a complaint with a supervisory authority, e.g.: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart; Tel. +49 711 615541-0; poststelle@lfdi.bwl.de.

Automated Decision-Making

No automated decision-making or profiling takes place (Art. 22 GDPR).

Changes to this Privacy Policy

I can update this privacy policy at any time. The current version will be published here with the date of the last change.