Legal
Privacy
Short version: we collect as little as possible, we don't use advertising cookies, and we never sell your data.
Placeholder. This page is a structural draft and must be completed and reviewed by a qualified legal professional before launch. Bracketed fields need real details.
1. Controller
The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is: [Full name / company], [street and number], [postcode and city], Germany. Email: [privacy contact email]. See also our imprint.
2. Cookies and analytics
This website does not use advertising trackers or non-essential cookies. Fonts are self-hosted, so your browser does not connect to third-party font services when you visit.
We use Simple Analytics for privacy-friendly visitor statistics. It does not use cookies and does not collect personal data such as IP addresses. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding how the website is used, without identifying individuals). No consent banner is required for this tool as configured.
3. Hosting and server logs
Our hosting provider, [hosting provider name and address], processes technical data that your browser sends automatically (such as IP address, date and time of the request, requested page and browser type) in order to deliver the website securely. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Logs are deleted after [retention period].
4. Newsletter
If you subscribe to the DON Letter, we process your email address to send it to you. The legal basis is your consent, Art. 6(1)(a) GDPR. We use a double opt-in: you will receive an email asking you to confirm your subscription. We record the time of signup and confirmation and the page you signed up on, to be able to demonstrate consent.
The newsletter is sent via [newsletter provider, e.g. Resend / Kit / Beehiiv], acting as our processor under Art. 28 GDPR. You can withdraw consent at any time via the unsubscribe link in every email or by contacting us. Your data is deleted when you unsubscribe, unless we are legally required to retain it.
5. External links
Links to TikTok, Instagram and YouTube are ordinary links. No data is transferred to those platforms until you click one; from then on, their privacy policies apply.
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the authority responsible for [federal state].
7. Changes
We will update this policy when our processing changes. The current version is always available on this page.
Last updated: 2 October 2026