Skip to content
mode

Legal

Privacy Policy

Last updated

This policy explains what personal data mode41 processes when you visit this website, why we process it, the legal basis under the GDPR (DSGVO), and which processors are involved. The controller responsible for this processing is named in our Imprint.

At a glance

  • We run no advertising trackers and set no analytics or marketing cookies, so there is no cookie banner.
  • We process the minimum data needed to serve the site, answer your messages, and (only if you ask) send you our newsletter.
  • We disclose every processor below, host the newsletter in the EU, and have a data-processing agreement (DPA/AVV) in place with each processor.

Hosting & content delivery — Vercel

This site is hosted on Vercel (Vercel Inc., USA). When you load a page, Vercel processes the data your browser necessarily sends — your IP address, the requested URL, referrer, user-agent, and timestamp — to deliver the site and to keep it secure. Vercel may log the IP address server-side for a short period for abuse detection and operational security.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure, performant site).
  • Transfer: Data may be processed in the USA under the EU Standard Contractual Clauses (SCCs) in Vercel's Data Processing Agreement.

Analytics — cookieless

We measure aggregate, anonymous usage (page views and referral source) using a cookieless, privacy-friendly analytics setup. We do not set cookies, do not build cross-session profiles, and do not store data that identifies you personally. We honour the Do Not Track (DNT) browser signal.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding, in aggregate, how the site is used). Because no information is stored on or read from your device, this requires no consent and no banner.

Contact form — Resend

If you use our contact form, we process the name, email address, and message you submit so we can reply. Delivery of the resulting notification and auto-reply email is handled by our transactional email provider Resend (Resend, Inc., USA). We never add you to a mailing list from this form. The form is protected against abuse by Cloudflare Turnstile and server-side rate limiting.

  • Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract / handling your enquiry) and Art. 6(1)(f) (legitimate interest in responding and preventing abuse).
  • Transfer: Processing in the USA under the EU Standard Contractual Clauses in Resend's DPA.
  • Retention: We keep enquiry correspondence only as long as needed to handle your request and any follow-up, then delete it.

Newsletter — Keila (double opt-in)

If you subscribe to our newsletter, we process your email address and your consent record. We use double opt-in: you receive a confirmation email and are only added to the list after you click the confirmation link. The newsletter is delivered with Keila (managed, hosted in Germany / the EU). There is no transfer to the USA. Every newsletter contains an unsubscribe link, and you can withdraw your consent at any time with effect for the future.

  • Legal basis: Art. 6(1)(a) GDPR (your consent).

Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object (Art. 21) to processing based on legitimate interest. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the address in our Imprint.