Privacy Policy

The controller responsible for data processing on this website within the meaning of Art. 4 (7) GDPR is:

Controller

Tillmann Kühn c/o WeWork Warschauer Platz 11-13 10245 Berlin Germany

Email

legal@tillmannk.com

No data protection officer has been appointed, as the conditions of § 38 of the German Federal Data Protection Act are not met.

This website is deliberately built to collect as little as possible. There are no user accounts, no contact form, no newsletter and no advertising networks. Cookies are used only for analytics with Google Analytics — and only if you have explicitly agreed beforehand.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When a page is requested, Vercel processes technically necessary connection data as a processor on my behalf:

• IP address of the requesting device
• date and time of the request
• URL requested and volume of data transferred
• HTTP status code and referrer URL
• browser and operating system used

This data is technically required to operate and secure the website. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in providing the website reliably and securely. A data processing agreement under Art. 28 GDPR is in place with Vercel.

As Vercel is based in the USA, data may be transferred to a third country. Vercel is certified under the EU-U.S. Data Privacy Framework and EU standard contractual clauses are additionally in place. Further information: vercel.com/legal/privacy-policy

Vercel Analytics (cookie-free)

Vercel Analytics is used to measure page views. The service works without cookies and without cross-device recognition. It collects aggregated metrics such as page requested, referrer, device type and country; the IP address is not stored, but only used transiently to derive an anonymous identifier.

The legal basis is Art. 6 (1) (f) GDPR. As no information is accessed on your device, no consent under § 25 TDDDG is required.

Google Analytics 4 (consent only)

If you have given your consent, Google Analytics 4 is used, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that make it possible to analyse how this website is used. The data collected includes in particular:

• pages viewed, time on page and interactions
• truncated IP address (IP anonymisation is enabled)
• referrer, device type, browser and operating system
• approximate location at country or city level

Legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. Without your consent the Google Analytics script is not loaded and no cookies are set. Google Consent Mode v2 is also used, which sets all consent types to “denied” by default.

Withdrawal: you can withdraw your consent at any time via the “Cookie settings” link in the footer. On withdrawal, any Google Analytics cookies already set are deleted and no further processing takes place. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Transfers to third countries: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, and EU standard contractual clauses are additionally in place. It cannot be ruled out that US authorities may access this data.

Retention: usage data collected in Google Analytics is deleted automatically after 14 months. Google Analytics cookies have a lifetime of up to 24 months.

A data processing agreement is in place with Google. Further information: policies.google.com/privacy

No strictly necessary cookies are set. Your consent decision itself is not stored in a cookie but in your browser's localStorage, so that your choice persists on a return visit. This information never leaves your device.

_ga, _ga_*

Google Analytics — distinguishes visitors and sessions. Lifetime up to 24 months. Only set with consent.

tk-analytics-consent

localStorage entry, not a cookie — stores your consent decision. No expiry; can be withdrawn at any time.

The fonts used (Space Grotesk and JetBrains Mono) are downloaded at build time and served from this site's own domain. No connection to Google Fonts is made when you load a page and no data is transmitted to Google.

This website embeds no external videos, maps, social media plugins or advertising networks.

If you contact me by email, the data you provide (name, email address, message content) is processed in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, and otherwise Art. 6 (1) (f) GDPR.

The data is deleted once your enquiry has been dealt with conclusively and no statutory retention obligations — in particular under commercial and tax law — prevent deletion.

You have the following rights in relation to the controller:

• Access to the personal data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent already given, with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, a message to legal@tillmannk.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is that of the federal state in which the controller is based:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61 10555 Berlin, Germany

datenschutz-berlin.de

This privacy policy will be updated if data processing on this website changes or if a change in the legal situation requires it. The version available here applies.