Privacy

This English version is provided for information only. The German version is legally binding.

Controller

The controller responsible for processing personal data on this website is:

Emil Dellert
e/d
Haarweg 11
48485 Neuenkirchen
Germany
Email: contact@ed.design

I have not appointed a data protection officer because there is no legal obligation to do so.

Overview

This policy explains which personal data are processed when you visit ed.design, for which purposes and on which legal basis, who receives them, whether they are transferred to countries outside the EU and how long they are kept. The website sets no cookies, stores nothing in your browser, does not measure its audience and loads no content from third parties: it delivers its texts, images, videos and fonts itself.

Providing the website and server logs

The website runs on Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. With every request, Vercel processes the data your browser sends for technical reasons:

• IP address
• date and time of the request
• requested page or file including parameters, HTTP method and status code
• browser type and version and operating system (user agent)

The purpose is to deliver the website, keep it secure and stable, and analyse errors. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is providing the website securely, reliably and quickly.

Vercel delivers pages through a worldwide server network; visitors from Germany are usually served from a data centre in Frankfurt am Main. Server-side functions, such as refreshing pages and forwarding form entries, run in a Vercel data centre in Frankfurt am Main.

Vercel acts as my processor (Art. 28 GDPR). Vercel automatically deletes the logs of my project after one day. In addition, Vercel processes log data under its own responsibility to detect abuse of and attacks on its platform; see Vercel's privacy policy for details. For the transfer to the USA, see "Transfers to third countries".

Processing these data is technically necessary to access the website. Without them, the website cannot be displayed.

No cookies, nothing stored in your browser

The website neither stores information on your device nor reads any from it (Section 25 TDDDG). It sets no cookies and uses neither local storage nor session storage. That is why there is no consent banner.

Inquiry form

When you write to me through the inquiry form, I process the following:

• name, email address and, if given, your message
• the package you put together in the package builder (chosen services, options and prices), if you built one
• the language of the page you write from, and the time of the request

The purpose is to handle your request, answer follow-up questions and, where applicable, prepare a quote. The legal basis is Art. 6(1)(b) GDPR where your request aims at entering into a contract, otherwise Art. 6(1)(f) GDPR; my legitimate interest is answering requests.

How your details are processed: the form is sent to a Vercel server. From there, the email delivery service Resend sends your request to my mailbox (Gmail) and sends you a confirmation with a copy of your request to the email address you entered. The emails contain no tracking pixels and no tracked links. Your IP address is passed on neither to Resend nor to Google.

The recipients are Vercel Inc. (see above), Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA, as the email delivery provider, and Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, as the provider of Google Workspace. All three act as my processors. Resend sends the emails through servers in Ireland and keeps data about sent emails for 30 days. Google may have data processed by Google LLC in the USA.

Name and email address are required. Providing them is not required by law or contract; without them, however, I cannot answer your request. You can also write me an email instead.

I delete your details once your request has been fully handled, and no later than twelve months after our last contact if no assignment results from it. If an assignment results, I keep the correspondence as far as statutory retention obligations apply, in particular under Section 147 of the German Fiscal Code (AO) (legal basis: Art. 6(1)(c) GDPR).

Contact by email

When you email me, I process your email address, your name if given, and the content and technical details of your message. My mailbox runs on Google Workspace (Gmail); provider and processing arrangement as in the previous section. Purpose, legal bases and retention are the same as in "Inquiry form".

Links to other websites

For my projects, I link to their websites. These are plain links, not embedded content. No data are sent to their operators until you click a link; from then on, their privacy policy applies.

Transfers to third countries

Vercel Inc. and Google LLC (USA) are certified under the EU-U.S. Data Privacy Framework. Transfers to these companies are covered by an adequacy decision of the European Commission (Implementing Decision (EU) 2023/1795, Art. 45 GDPR). You can check the certification in the Data Privacy Framework List. The contracts with Vercel and Google also provide for standard contractual clauses. For Plus Five Five, Inc. (Resend), the European Commission's standard contractual clauses (Module 2) in Resend's data processing agreement apply; Resend also states that it participates in the EU-U.S. Data Privacy Framework.

Your rights

You have the right to

• access the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR, see below).

An informal email to contact@ed.design is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for me is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Online complaint: ldi.nrw.de/beschwerde

Right to object under Art. 21 GDPR

Where I process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Your data are not used for direct marketing. An email to contact@ed.design is enough to object.

Automated decisions

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

Last updated (Stand): September 2026