Impressum & Privacy

This site sets no cookies, uses no tracking, and loads no web fonts or third-party content. Nothing is stored on or read from your device. Vercel, the site's host, processes technical data when you visit. If you email me, Google Workspace processes your message. You can object to this processing at any time (section 6).

The controller under Art. 4(7) GDPR is Nils A. Breitmar (info@breitmar.com). The postal address is in the Impressum above.

I am not required to appoint a data protection officer and have not appointed one.

This site is hosted and delivered by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel's servers process your IP address, the date and time of the request, the requested address, the response status and size, your browser and device type (user agent), and the referring page if your browser sends one. Without this processing the page cannot be delivered or protected against attacks and misuse.

• Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is delivering this site reliably and securely.
• Retention: the site consists of static files only. No program of mine runs on Vercel's servers, and Vercel's analytics and performance measurement are switched off for this site. I do not export, copy or store any request logs. Vercel processes the request data while it delivers the page and protects its network, and keeps it only as long as those purposes require. Vercel does not publish a fixed period.
• Processor: Vercel processes this data on my behalf under its data processing addendum (Art. 28 GDPR), which Vercel's terms of service refer to.
• Transfers outside the EU: Vercel runs a global network, so your request may be handled in a data center outside the EU, and Vercel Inc. is based in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA rest on the European Commission's adequacy decision (Art. 45 GDPR). For other countries, and as a fallback, the EU standard contractual clauses in Vercel's data processing addendum apply (Art. 46(2)(c) GDPR).

Statistics. Vercel's dashboard shows me aggregated usage figures, such as the number of requests. No script runs in your browser and nothing is stored on your device. I look at them only to see whether the site is reachable, and I do not export them. Legal basis: Art. 6(1)(f) GDPR, my interest in knowing whether the site works.

If you write to info@breitmar.com, I process your email address, your name if you give it, the content of your message, and its technical metadata (such as the time and the mail servers involved). I use this data only to deal with your request.

My email runs on Google Workspace. Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, processes it on my behalf under Google's Cloud Data Processing Addendum (Art. 28 GDPR). Google LLC (USA) and other Google companies can be involved as sub-processors. Transfers to the USA rest on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and, as a fallback, on the EU standard contractual clauses (Art. 46(2)(c) GDPR).

• Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in answering messages sent to me. If your message concerns a contract with you, or steps you ask for before one, the legal basis is Art. 6(1)(b) GDPR.
• Retention: I delete your messages once your request has been dealt with and no follow-up is expected. If tax or commercial law requires me to keep a message, for example because it relates to a business transaction, I keep it for the period the law requires and use it for nothing else (Art. 6(1)(c) GDPR).
• Email is normally sent with transport encryption, but it is not end-to-end encrypted. Please do not send sensitive information by email.

• No cookies, and nothing else stored on or read from your device. Under §25 TDDDG no consent is needed, so there is no consent banner.
• No tracking, no advertising, no profiling.
• No web fonts. The site uses the fonts already on your device.
• No third-party scripts, embeds or images.
• Links to other sites, such as LinkedIn, are plain links. Nothing is sent to those sites unless you click one, and this site tells your browser not to pass on which page you came from. After you click, the other site's privacy policy applies.

You are not required by law or contract to provide personal data. Without the technical data described in section 2, your browser cannot load this site. Writing to me is voluntary; without your email address I cannot reply. I do not use automated decision-making or profiling (Art. 22 GDPR).

Under the GDPR you also have the right to:

• access to your data (Art. 15)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)

To use any of these rights, write to info@breitmar.com.

You have the right to complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work or where the alleged infringement took place. The authority responsible for me is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44, 40102 Düsseldorf, Germany
Website: www.ldi.nrw.de