Privacy policy

As of 9 October 2026. This policy explains which personal data we process when you visit this website, for what purpose and on which legal basis. The German version is authoritative.

1. Controller

VEGVÍSIR GmbH, Ballindamm 27, 20095 Hamburg, Germany, email: info@vegvisir.gmbh, represented by its managing director Mark C. Reinold.

2. Hosting and server logs

The website is operated by Vercel Inc., server functions run in the Frankfurt am Main region. When you visit, Vercel processes technically necessary data such as IP address, time, page requested, browser and operating system in order to deliver the website and protect it from attacks. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in secure and stable operation. A data processing agreement is in place with Vercel. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or standard contractual clauses.

3. Cookieless analytics

We use Vercel Web Analytics and Vercel Speed Insights. Neither uses cookies or cross-device profiles. They record aggregated data such as pages viewed, referrer, country, device type and load times. Visitors are only distinguished by a daily rotating, non-traceable hash. The legal basis is Art. 6(1)(f) GDPR, our interest in a fast and user-friendly website. As no information is stored on or read from your device, no consent under Section 25 TDDDG is required.

4. Contact form and email

When you write to us via the form or by email, we process your name, email address, optionally company and topic, and your message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR.

Form submissions are stored in a database at Supabase Inc. in the Frankfurt am Main region, and a notification is sent via Resend. To prevent abuse we also store a truncated value of your IP address, hashed with a secret key, for 24 hours. Data processing agreements are in place with both providers. We delete requests once they are resolved and no statutory retention periods apply, at the latest after 24 months.

5. Fonts and external content

All fonts are served from our own server. No content is loaded from Google Fonts, social networks or ad networks. Links to LinkedIn or vegvisir.digital are plain links; data only flows when you follow them. If you switch between light and dark mode, we store only that choice in your browser's local storage so it persists on your next visit. This is necessary for the function you requested (Section 25(2) no. 2 TDDDG) and is never sent to us.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. Write to info@vegvisir.gmbh. You may also lodge a complaint with a supervisory authority, such as the Hamburg Commissioner for Data Protection and Freedom of Information.

7. Changes

We update this policy when the website or the law changes. The version published here applies.