Privacy Policy

Last updated: 26 October 2026

Who is responsible

The controller responsible for data processing on this website is:

Your rights

Under the GDPR you have the right to:

• request access to the personal data I hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data deleted (Art. 17)
• restrict how your data is processed (Art. 18)
• receive your data in a machine-readable format or have it transferred to another controller, where technically feasible (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time, with effect for the future. An informal email is enough.

To exercise any of these rights, email me at the address above. This is free of charge.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), https://www.datenschutz-berlin.de.

Hosting and server log files

This website is hosted by Vercel Inc., United States. When you visit the site, the hosting provider automatically collects information that your browser sends and stores it in server log files:

• page visited
• date and time of the request
• browser type and version
• operating system
• referrer URL
• hostname of the accessing device
• IP address

This data is not combined with other data sources. It is processed to deliver the website and keep it secure. The legal basis is my legitimate interest in operating a stable and secure website (Art. 6(1)(f) GDPR).

Encryption

This website uses SSL/TLS encryption to protect data in transit. You can recognize an encrypted connection by "https://" in the address bar and the padlock icon in your browser.

Contact form and email

If you send me a message through the contact form or by email, I process your email address and the content of your message to reply to you and handle any follow-up. I do not share this data with anyone else. If you arrived through a link with an outreach reference or campaign parameters (see below), they are sent along with your message.

The contact form is processed by Resend, Inc., United States. Submissions are not stored in a database on this website; they are passed to Resend, which sends them on to my email inbox and keeps a record of the message in its own system.

This involves transferring your data to the United States. [PLACEHOLDER: transfer safeguard].

The legal basis is my legitimate interest in replying to messages sent to me (Art. 6(1)(f) GDPR). Where your message relates to a potential project or contract, the legal basis is Art. 6(1)(b) GDPR. I delete your data once the conversation has ended, unless legal retention obligations apply.

Booking a call (Cal.com)

The "Book a 15-minute call" buttons open a booking window provided by Cal.com. [TODO(akshay): the provider's legal name and address, from Cal.com's privacy policy or your data processing agreement with them.]

The Cal.com script is not loaded with the page. Your browser fetches it from app.cal.com only after you move the pointer over, tab to or tap a booking button. Until then, no connection to Cal.com is made.

Once the script loads, your browser connects to Cal.com's servers, which receive technical data such as your IP address and browser information. [TODO(akshay): what Cal.com logs, and whether the booking window sets cookies or uses local storage.]

When the booking window opens, it is passed the outreach reference and campaign parameters described below, if you have them. No personal data is filled in for you.

If you book a call, Cal.com receives what you enter in the booking form, such as your name, email address and any notes, and the time you choose. Cal.com adds the booking to my Google Calendar. [TODO(akshay): name Google as a recipient and describe how calendar data is processed.]

Cal.com's own privacy policy: https://cal.com/privacy.

[TODO(akshay): the legal basis for bookings, the transfer safeguard if booking data leaves the EU, and how long booking data is kept.]

If you would rather not use Cal.com, the contact form and email work without it.

Outreach reference

Links I send may contain a short reference to your company (for example ?ref=company-name) and the campaign parameters utm_source and utm_campaign. This site keeps these values in your browser's session storage, so they are still known on the next page you open. Session storage is cleared when you close the tab. The values go to Cal.com when you open the booking window, and to me with a contact form message.

[TODO(akshay): whether storing this reference in the browser needs consent under § 25 TDDDG, and the legal basis for processing it.]