Legal
Privacy
Personal data is treated here by the same standard as the systems this site is about: minimal, traceable and under the control of the person concerned.
1. Controller
Paul Krümmling Germany Email: contact@paulkruemmling.de A postal address for service of documents is provided on request by email.
2. Processing principle
The pages of this website are statically prerendered. No cookies are set, no tracking takes place, no profiling is carried out and no third-party analytics services are embedded. Personal data arises in only two places: in the host’s technical log files and when you actively get in touch.
3. Hosting and server log files
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the site is accessed, the host processes technically necessary access data (IP address, date and time, requested resource, referrer, browser and device type). The legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in secure and stable operation. The transfer to the USA is safeguarded by the European Commission’s Standard Contractual Clauses and the provider’s certification under the EU-US Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR is in place.
4. Contact form
Details submitted via the contact form — name, email address, optionally organisation and topic, and the message text — are processed solely in order to handle your enquiry. Transmission is TLS-encrypted; the message is delivered to the controller’s mailbox via an SMTP server and is not stored in a database. The legal basis is Art. 6 (1) (a) GDPR (your consent given via the consent checkbox) as well as Art. 6 (1) (b) or (f) GDPR. To protect against automated submissions, your IP address is held transiently in memory for at most 15 minutes in order to limit the number of submissions; it is not stored permanently and is not transmitted with the message. Enquiries are deleted once their purpose ceases to apply and no statutory retention obligations prevent deletion. You may withdraw your consent at any time, informally, by email.
5. Email delivery
Google Workspace, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is used to send and receive these messages. This may involve a transfer to Google LLC in the USA, safeguarded by Standard Contractual Clauses and certification under the EU-US Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR is in place.
6. Contacting me by email
If you write directly by email, the information provided is likewise processed solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) or (f) GDPR. The same deletion periods apply as for the contact form.
7. Fonts
All fonts used are served locally from this website’s own server. No connection is made to external font providers.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. An informal message to the email address above is sufficient to exercise these rights.
9. Changes
This policy is adapted whenever website functionality or the legal situation changes. The version published here applies.
Last updated: August 2026