DatenschutzerklärungDSGVO

Datenschutz

The easy part

This site currently collects nothing. Fonts are self-hosted, there is no analytics, no tag manager, no embedded map or video, and no consent banner is required. That is a deliberate position and it is worth defending — the first third-party embed someone adds will cost you it.

Verantwortlicher: TODO — same legal entity and contact as the Impressum, per Art. 13 Abs. 1 DSGVO.
Server-Logfiles: TODO — depends on the host. Vercel, Netlify and a German VPS all log differently. Name the retention period and the legal basis (usually Art. 6 Abs. 1 lit. f).
Auftragsverarbeitung: TODO — if hosting is outside the EU you need an AV-Vertrag and a note on the transfer mechanism. This is the single most common gap.
Kontaktaufnahme: Applications arrive by email. Say what happens to that data, how long it is kept, and that unsuccessful applications are deleted.
Schriften: Self-hosted via next/font. No data reaches Google. This is worth stating explicitly — it is unusual enough that people check.
Lokale Speicherung: One localStorage entry, "ursprung-ground", storing the light/dark ground preference. No tracking, no transmission.
Betroffenenrechte: TODO — Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerspruch, plus the right to complain to the Landesbeauftragter für den Datenschutz Baden-Württemberg.

Scaffold only — the TODOs above are the questions a real Datenschutzerklärung has to answer, not the answers. Have someone competent finish it once hosting is chosen.