Privacy Policy
Last updated: 12 July 2026
Controller
Niklas Lenz
Scheidtstr. 71
42369 Wuppertal, Germany
Email: niklas@niklaslenz.de
The short version
This is a static website. It sets no cookies, runs no analytics or tracking, embeds no third-party scripts or fonts (fonts are self-hosted), and has no forms. The only personal data processed is what your browser technically transmits to load the site, and whatever you choose to send me by email.
Hosting (server log data)
This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes connection data that your browser transmits (IP address, date and time of the request, requested URL, browser/OS identifiers, referrer) in server logs to deliver the site and to ensure stability and security.
Legal basis: Art. 6(1)(f) GDPR — my legitimate interest in providing and securing this website. Vercel acts as a processor under Art. 28 GDPR. Data may be transferred to the USA; Vercel relies on recognized transfer mechanisms (EU standard contractual clauses / EU-U.S. Data Privacy Framework). See Vercel's privacy policy.
Contact by email
If you email me (for example to ask about working together or a consulting enquiry), I process the data you provide (email address, name if given, message content) to answer your request. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (handling correspondence). Emails are kept as long as needed for the correspondence and statutory retention duties.
External links
This site links to Instagram. No data is transmitted to that provider by merely visiting this site — its privacy policy applies only once you follow the link.
Your rights
- Access to your personal data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR) — for me, the competent authority is the LDI Nordrhein-Westfalen
This policy is provided in English for the international audience of this site. The controller is based in Germany and the GDPR applies.