Privacy Policy

Datenschutzerklärung · Last updated: July 2026

This privacy policy explains how personal data is processed when you visit this website, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Alexander Löhn
Stahltwiete 18
22761 Hamburg
Deutschland
E-mail: alexloehn@gmail.com

2. Hosting and server log files

This website is hosted by Netlify, Inc. (USA). When you access the site, the hosting provider processes technically necessary connection data such as your IP address, date and time of access, requested resource, and browser type in server log files. This processing is required to deliver the site securely and reliably.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Where data is transferred to the USA, appropriate safeguards apply under Art. 46 GDPR (e.g. Standard Contractual Clauses) and/or the EU-US Data Privacy Framework where applicable.

Log data is retained for a limited period according to Netlify's policies and then deleted or anonymized.

3. Fonts

The site loads web fonts from Google Fonts (Google Ireland Ltd. / Google LLC, USA). When fonts are loaded, your browser may connect to Google servers and transmit your IP address. Google Fonts are loaded without cookies in the current implementation.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent, readable presentation). You can block external font loading via browser or network settings; the site remains usable with fallback fonts.

4. Contact chat (AI assistant)

The contact section includes a chat-style assistant labelled as Alex's AI assistant. When you send a message:

• Your message is transmitted to Netlify serverless functions operated by this site.
• Those functions forward your question to the Cursor Cloud Agents API, which runs an AI agent backed by a read-only GitHub repository with public profile content.
• Each question and answer may be e-mailed to the operator via Resend for transparency and follow-up.
• A session identifier (aiAgentId) may be stored in your browser's sessionStorage so follow-up messages stay in the same conversation until you close the tab.
• Chat messages are not stored in a database on this site beyond the operator's e-mail log.

Please do not enter sensitive personal data (Art. 9 GDPR) or confidential third-party information into the chat. For direct contact, use the e-mail address or phone number shown on the site.

Legal basis: Art. 6(1)(a) GDPR (consent by actively sending a message) and Art. 6(1)(f) GDPR (legitimate interest in presenting the contact experience and handling enquiries). Use of the chat is optional; the rest of the site works without it.

Recipients / transfers: Netlify (hosting, USA), Cursor (AI processing, USA), Resend (e-mail delivery, USA), and Upstash (rate limiting / agent pool, EU/USA depending on region). Transfers rely on appropriate safeguards under Art. 46 GDPR where applicable.

5. Direct contact (e-mail and telephone)

If you contact us by e-mail or telephone, we process the data you provide (e.g. name, e-mail address, message content) to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Data is deleted when no longer required for the purpose, unless statutory retention obligations apply.

6. Cookies and local storage

This marketing site does not set analytics or advertising cookies. No cookie consent banner is required for strictly necessary technical operation. The AI chat may store a session identifier in sessionStorage (not a cookie) to continue a conversation within the same browser tab.

7. No analytics or tracking

At the time of this policy, the site does not use analytics tools, remarketing pixels, or similar tracking services.

8. Your rights

Subject to legal requirements, you have the right to:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR).

Where processing is based on consent, you may withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, contact us using the details in section 1.

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work, or place of the alleged infringement. In Hamburg, the competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit).

10. Changes to this policy

We update this privacy policy when processing activities or legal requirements change. The current version is always published on this page.