Frank Anderssohn
Rechtliches

Privacy Policy

1. Controller

Frank Anderssohn
Relingstr. 16
12527 Berlin, Germany
Email: info@frank-anderssohn.com
Contact form: /#kontakt

2. General information and legal bases

We process personal data exclusively on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Legal bases are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in the secure and functional operation of this website).

3. Hosting and server log files

This website runs on infrastructure provided by Lovable and is delivered via Cloudflare Workers (Cloudflare, Inc., USA). On each request, technically necessary data is recorded in server logs: IP address (truncated/anonymized), date and time, requested URL, referrer, user agent. Legal basis: Art. 6(1)(f) GDPR (secure operation, abuse prevention). Retention: up to 6 months, then automatic deletion. Data processing agreements (Art. 28 GDPR) are in place with these providers.

4. Contact form

When you use the contact form we process the data you provide (name, email, optionally company, message) to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (efficient communication). The data is stored in Lovable Cloud (database powered by Supabase, hosting region EU) and forwarded to Mailgun (Sinch Email, Mailgun Technologies, Inc., USA) for email delivery. Retention: 6 months after the last correspondence, then deletion unless statutory retention obligations apply.

5. Services and recipients used

  • Lovable / Lovable Cloud – hosting, database, backend functions.
  • Supabase – database and backend platform, hosting in the EU.
  • Cloudflare Workers – edge delivery of the website (USA).
  • Mailgun – delivery of transactional emails (USA).
  • Google Fonts (Google Ireland Ltd. / Google LLC, USA) – the "Inter" web font is loaded from the Google CDN, which transmits your IP address to Google. Legal basis: Art. 6(1)(f) GDPR (consistent presentation).

6. Google Analytics 4

If you consent via our cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies or similar technologies to analyze your use of the website in an anonymized way (e.g. pages visited, time on page, approximate location based on the truncated IP address, device/browser information). The IP address is truncated before any storage (anonymize_ip). Data is not combined with other Google services on this website.

Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent). Retention: 14 months, then automatic deletion by Google. Recipient: Google Ireland Limited; transfer to Google LLC (USA) cannot be excluded and is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where certified, the EU-US Data Privacy Framework (Art. 45 GDPR).

Withdrawal: You can withdraw your consent at any time with effect for the future by clicking "Cookie settings" in the footer and selecting "Decline". For more information, see Google's privacy policy.

7. Transfers to third countries (USA)

Some services (Cloudflare, Mailgun, Google Fonts, Google Analytics) are based in or may transfer data to the United States. Such transfers are based on the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where certified, on the EU-US Data Privacy Framework (Art. 45 GDPR).

8. Cookies and local storage

This website does not use tracking or marketing cookies without your consent. Without consent, only strictly necessary entries are stored in the browser's local/session storage (e.g. language preference, consent status, session token for bot prevention). After consent to Google Analytics, _ga and _ga_* cookies are additionally set. Legal basis: Section 25(2) No. 2 TDDDG (strictly necessary) and Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

9. SSL/TLS encryption

This website uses SSL/TLS encryption end-to-end to protect the transmission of your data.

10. Your rights as a data subject

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interests (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

Please address such requests to info@frank-anderssohn.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

12. Status

Last updated: June 2026.