Privacy Policy

Who is responsible

Waldo Vanderhaeghen, Berlin, Germany.
Contact: waldo@vanderlore.de

Analytics (Google Analytics 4)

This site uses Google Analytics 4 to understand how visitors find and use it. Analytics is only activated if you explicitly accept cookies via the banner shown on your first visit. If you decline, no data is sent to Google.

When analytics is active, Google Analytics collects: pages visited, time spent, referrer URL, browser type, approximate location (country), and custom events. No names, email addresses, or personally identifiable information are collected.

This site uses Google Consent Mode v2. Analytics storage is set to denied by default and only changed to granted when you accept. Advertising storage is always denied.

Google Analytics data is processed by Google LLC. See Google's Privacy Policy.
Legal basis: Art. 6(1)(a) GDPR (your consent).
Retention: Up to 14 months.

Behavioral analytics (PostHog)

This site uses PostHog, a web analytics and product analytics service provided by PostHog Inc. (2261 Market Street #4008, San Francisco, CA 94114, USA). PostHog is only activated if you explicitly accept cookies via the banner shown on your first visit. If you decline, no data is sent to PostHog.

PostHog collects: pages visited, clicks, scroll depth, and anonymised usage events. All form inputs are automatically masked; no personal data entered into forms is recorded. Data is processed on EU servers (Frankfurt, AWS eu-central-1). PostHog has entered into a Data Processing Agreement pursuant to Art. 28 GDPR — see posthog.com/dpa.

Legal basis: Art. 6(1)(a) GDPR (your consent).
Retention: 1 year.

Appointment scheduling (Cal.com)

The booking calendar on this site is powered by Cal.com, a scheduling service operated by Cal.com, Inc. (San Francisco, CA, USA). Cal.com, Inc. participates in the EU–U.S. Data Privacy Framework (DPF) and processes booking data in compliance with GDPR.

When you book an appointment, Cal.com collects: your name, email address, selected time slot, and any notes you add. This data is used solely to confirm and conduct the appointment.

The calendar on the contact page loads automatically only if you accepted cookies; otherwise it loads only when you click “Show the calendar”. No other page contacts Cal.com. Once loaded, Cal.com sets its own technically necessary cookies (security and session) and processes your IP address and browser data, including for error monitoring.

Legal basis: loading the calendar: your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG) or your explicit request by clicking (§ 25(2) No. 2 TTDSG); booking: Art. 6(1)(b) GDPR (necessary for the performance of pre-contractual steps at your request).
Retention: 12 months.

Fonts (self-hosted)

This site uses the Oswald and Inter fonts, self-hosted via @fontsource npm packages. No request is made to Google Fonts or any external CDN.

Hosting

This site is hosted on Vercel (Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA). Vercel processes server access logs as a technically necessary part of infrastructure operations.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable hosting).

Your rights (GDPR)

You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), port (Art. 20), and object to (Art. 21) the processing of your personal data. To exercise these rights, contact waldo@vanderlore.de.

You may also lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Friedrichstr. 219, 10969 Berlin, www.datenschutz-berlin.de.