Privacy notice

Controller

The controller responsible for data processing on this website is me: Humphry Gafire Lomuria (StarSeed-IT), Yorckstraße 13, 14467 Potsdam, Germany, email: info@starseed-it.com.

In short

I only process the data needed to run this website and to answer your enquiry. This website sets no cookies. There is no third-party tracking, no advertising and no embedded content from other providers. I do not sell any data.

Hosting with Vercel

This website runs on Vercel Inc., 440 N Barranca Ave No. 4133, Covina, CA 91723, USA. Vercel delivers the pages through a worldwide network of servers.

A data processing agreement with Vercel is in place (Article 28 GDPR). Vercel is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA are based on the European Commission's adequacy decision (Article 45 GDPR) and, in addition, on standard contractual clauses (Article 46 GDPR).

The legal basis is my legitimate interest in providing the website securely and quickly (Article 6(1)(f) GDPR).

Server logs

With every request, Vercel processes technically necessary data: IP address, date and time, requested address, previously visited page (referrer), browser and operating system, amount of data transferred and status code.

This data is used to deliver the pages, for security (for example to fend off attacks) and for troubleshooting. Vercel deletes the logs automatically after a short time. I do not combine them with other data. The legal basis is Article 6(1)(f) GDPR.

Contact form and email

If you write to me via the contact form or by email, I process your name, your email address, optionally your company or organisation, and your message. I use this information only to answer your enquiry.

The form sends your details encrypted through Strato's mail server (SMTP) as an email to my mailbox. There is no automatic confirmation email to you.

To prevent abuse, I count how many enquiries come from one IP address. For this, the IP address is only kept in the server's memory, is not stored permanently and is no longer taken into account after one hour.

The legal basis is Article 6(1)(b) GDPR if your enquiry concerns an assignment or questions before an assignment. Otherwise I rely on my legitimate interest in answering your enquiry (Article 6(1)(f) GDPR).

Retention period: I delete your enquiry once it has been dealt with, at the latest six months after the last contact. If it leads to an assignment, I keep the necessary records for as long as commercial and tax law requires (up to ten years).

Email provider Strato

My mailbox and the domain are hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Strato stores the emails on servers in Germany. A data processing agreement with Strato is in place (Article 28 GDPR).

Vercel Web Analytics and Speed Insights

To see which pages are read and how fast they load, I use Vercel Web Analytics and Vercel Speed Insights. Both work without cookies and store nothing on your device.

Web Analytics recognises a visit by a hash value derived from the request, which expires after 24 hours. It cannot be used to identify a person, and visits on different days are not linked. It records the page visited, the referrer, the country, browser, operating system and device type, plus two events without any content: “Form submitted” and “Email link clicked”. Speed Insights measures loading times (Web Vitals).

The data is sent to Vercel via the address of this website (see hosting). The legal basis is my legitimate interest in a usable and fast website (Article 6(1)(f) GDPR). You can object at any time. Technically, it is enough to block JavaScript or addresses containing “/_vercel/” in your browser.

Fonts

The fonts of this website are stored on the same server as the pages and are delivered with them. Your browser does not connect to Google or any other provider for them.

Browser storage (localStorage)

If you switch between light and dark mode, I store your choice in your browser's localStorage (entry “theme”). The value stays on your device and is not sent to me. It is technically necessary for the function you asked for (Section 25(2) no. 2 TDDDG). You can delete it in your browser at any time.

No cookies

This website sets no cookies and uses nothing that would require consent. That is why there is no cookie banner.

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You can object at any time to processing based on Article 6(1)(f) GDPR (Article 21). Just write to me at info@starseed-it.com.

Complaint to the supervisory authority

You can lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority responsible for me is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, www.lda.brandenburg.de.