This is a courtesy translation of the legally binding German Datenschutzerklärung. In case of conflict, the German version takes precedence.
This notice explains which personal data is processed when you visit de-data.de, on what legal basis, and what rights you have as a data subject under the GDPR.
1. Controller
The controller under the GDPR is:
Piers Spencer-Phillips
Tannenstrasse 7
82049 Pullach im Isartal
Germany
Email: pierssp@gmail.com
Phone: +49 151 745 069 74
2. Principles
de-data.de does not use advertising cookies or tracking pixels. No personal visitor profiles are created. For audience measurement we use a cookieless, anonymised web analytics service (see section 5, Vercel Web Analytics). Personal data is processed only to the extent necessary for operating the site and for features you have explicitly requested (such as the newsletter).
3. Data processed when visiting the site
Visiting de-data.de requires processing technically necessary data without which the pages cannot be delivered, in particular:
- IP address (truncated where possible)
- Date and time of the request
- Requested URL and HTTP status code
- Bytes transferred
- Browser user agent and language
- Referrer (previous page), if sent by the browser
This data is processed by the hosting provider (see section 5) in short-lived server logs. We do not link the data to any identifiable individual.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in the technical operation and security of the site).
Retention: per the hosting provider, typically a few hours up to a maximum of 30 days.
4. Newsletter
If you subscribe to the DEdata newsletter, we process:
- Your email address
- Date and time of subscription
- Status (pending, confirmed, unsubscribed)
- A random confirmation token for verification
Subscription uses double opt-in: after entering your email address you receive a confirmation message. Only after clicking the link in that message does your subscription take effect. Until then, your status is pending and no further emails are sent.
You can unsubscribe at any time. Every newsletter email contains an unsubscribe link. After unsubscribing, your address is marked as unsubscribed in the database and is no longer used for sending; it remains stored to prevent accidental re-subscription until you request full deletion.
Legal basis: Art. 6 (1) lit. a GDPR (consent). You may withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
5. Recipients and processors
The site and newsletter rely on the following services, with data processing agreements under Art. 28 GDPR:
Vercel (hosting)
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel operates the servers hosting de-data.de and processes the access data listed in section 3. Vercel privacy policy: vercel.com/legal/privacy-policy. Data transfers to the US take place under the EU-US Data Privacy Framework.
Airtable (newsletter database)
Provider: Formagrid Inc. (Airtable), 155 5th Street, San Francisco, CA 94103, USA. Airtable stores newsletter subscribers' email addresses and subscription status. Airtable privacy policy: airtable.com/company/privacy. Data transfers to the US take place under the EU-US Data Privacy Framework.
Resend (email delivery)
Provider: Resend, Inc., 2261 Market Street #4515, San Francisco, CA 94114, USA. Resend sends confirmation emails (double opt-in) and, in future, regular newsletter issues. Resend privacy policy: resend.com/legal/privacy-policy. Data transfers to the US take place under the EU-US Data Privacy Framework.
Vercel Web Analytics (audience measurement)
Provider: Vercel Inc. (as above). We use Vercel Web Analytics to understand which pages are visited and where visitors come from. No cookies are set and no personal data (such as IP addresses) is stored permanently. The IP address and user agent are combined into an anonymised hash once per day; the hash cannot be traced to individuals and rotates daily. What is collected: the page visited, the country code, the referrer (where the visit came from), and approximate device data (e.g. mobile or desktop). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in non-personal statistical audience measurement). Vercel Analytics privacy notice: vercel.com/docs/analytics/privacy-policy.
6. Cookies and local storage
de-data.de sets no cookies for marketing or tracking. The hosting provider Vercel may set technically required cookies for load balancing; these are short-lived and do not require consent under § 25 TDDDG since they are strictly necessary for operating the site. The Vercel Web Analytics used for audience measurement also works without cookies; nothing is stored on or read from your device.
7. Your rights as a data subject
Under the GDPR you have the following rights:
- Access to stored data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing (Art. 21)
- Withdrawal of consent (Art. 7 (3))
To exercise these rights, an informal email to pierssp@gmail.com is sufficient.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for the controller is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0
Web: www.lda.bayern.de
9. Version and changes
This version: May 2026. Updates will be made when changes to the service or to the processors used require them. The current version is always available on this page.