Privacy Policy

The data controller for processing on this website is:

Len Fabian Bauer (sole proprietor)
Bauer Web Studio
Meininger Str. 11
10823 Berlin
Germany

Email: hi@bauerwebstudio.com
Phone: +49 160 96433863

We are not legally required to appoint a Data Protection Officer.

When you visit this website, technical data is processed to provide the service and maintain security, in particular:

• IP address
• Date/time of request
• Requested URL/resource
• Referrer URL
• Browser/user agent and operating system
• HTTP status information

This processing is necessary for stable operation, abuse prevention, and IT security.

If you contact us, we process the data you provide (for example: name, email address, company, selected services, budget range, and your message) in order to handle your inquiry, prepare offers, and communicate with you.

For reliable email delivery of contact-form notifications and automatic reply emails, we use Resend (Resend, Inc., USA). We have disabled open/click tracking in our implementation. Resend provides DPA terms and states that data transfers can rely on Standard Contractual Clauses (SCCs), and where applicable on EU-U.S. Data Privacy Framework participation. Subprocessor list: resend.com/legal/subprocessors.

We use Vercel Analytics and Vercel Speed Insights to understand aggregate usage and technical performance. According to provider documentation, these services run without cookies and use anonymized/aggregated measurement data. In our implementation, they are enabled in production.

We do not currently use a cookie consent banner for analytics. Where cookies or similar technologies are used, they are limited to technically necessary purposes or to cookie-free aggregate measurement as described in this policy.

Personal data may be disclosed to the following categories of recipients where required for the stated purposes:

• hosting/infrastructure provider(s)
• email delivery provider (Resend)
• analytics providers for cookie-free aggregate measurement (currently Vercel Analytics/Speed Insights)
• IT/security service providers and professional advisors, where necessary

We do not sell personal data.

If data is transferred to recipients outside the EU/EEA, we use appropriate safeguards under Art. 44 et seq. GDPR, in particular SCCs and, where applicable, adequacy mechanisms such as the EU-U.S. Data Privacy Framework.

Unless a more specific period is stated, we store personal data only as long as necessary for the purpose and legal obligations.

Current baseline periods:
• contact inquiries and related business communication: generally up to 3 years after last relevant contact, unless longer statutory retention applies
• aggregate analytics and performance data: according to the configured provider retention settings for Vercel Analytics and Speed Insights

Depending on the processing context, the legal bases are in particular:

• Art. 6(1)(b) GDPR (pre-contractual/contract communication)
• Art. 6(1)(f) GDPR (legitimate interests: secure operation, abuse prevention, technical reliability, and privacy-friendly aggregate reach/performance measurement via Vercel Analytics and Speed Insights)
• Section 25(2) No. 2 TDDDG (strictly necessary storage/read access)

You have the following rights, subject to legal requirements:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection (Art. 21 GDPR)
• withdrawal of consent at any time (Art. 7(3) GDPR)

To exercise rights, contact: hi@bauerwebstudio.com

You have the right to lodge a complaint with a supervisory authority, in particular in your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

Responsible authority for Berlin:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin
www.datenschutz-berlin.de

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR for this website.