Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is:

No data protection officer is required to be appointed (Art. 37 GDPR in conjunction with § 38 BDSG), as no extensive systematic processing of special categories of personal data takes place and the thresholds for mandatory appointment are not reached.

2. Hosting and Server Logs

This website is hosted by Vercel Inc. (340 Pine Street, Suite 700, San Francisco, CA 94104, USA). The domain is operated via STRATO AG (Pascalstraße 10, 10587 Berlin, Germany).

Vercel (Web Hosting)

When you access this website, Vercel automatically processes so-called server log files transmitted by your browser. This includes:

• IP address of the requesting device (truncated or full)
• Date and time of access
• Name and URL of the retrieved file
• Volume of data transferred
• Notification of successful retrieval (HTTP status code)
• Browser type and version, and operating system
• Referrer URL (previously visited page)

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security and stable operation of the website). The data is not merged with other data sources. Vercel has committed to compliance with the GDPR; data transfer to the USA is based on the EU Commission's standard contractual clauses (Art. 46 GDPR). For more information, see Vercel's Privacy Policy.

STRATO (Domain)

Personal data (owner data) is processed by STRATO for domain operation. As a German company, STRATO is directly bound by the GDPR. For more information, see STRATO's Privacy Policy.

3. Contact by Email

When you contact us by email, the data you provide (your email address, name and the content of your message) will be stored by us in order to process and respond to your enquiry.

The legal basis is Art. 6(1)(b) GDPR (initiation or performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in processing enquiries). The data will be deleted after your enquiry has been fully processed, provided no statutory retention obligations apply.

4. Calendly

The service Calendly by Calendly LLC (271 17th St NW, Atlanta, GA 30363, USA) is used for booking initial consultations. By clicking on the booking link, you will be redirected to the Calendly website.

When using Calendly, the following data is processed by Calendly LLC: name, email address, selected appointment slot and any additional information you provide during the booking process.

The legal basis is Art. 6(1)(b) GDPR (implementation of pre-contractual measures at the request of the data subject) and Art. 6(1)(f) GDPR (legitimate interest in efficient appointment coordination).

Data transfer to the USA is based on the EU Commission's standard contractual clauses (Art. 46 GDPR). For more information, see Calendly's Privacy Policy.

5. Fontshare CDN (Fonts)

This website uses fonts from the Fontshare service, provided by Indian Type Foundry (via the CDN endpoint api.fontshare.com). When the page loads, a connection is established to Fontshare's servers, and your IP address may be transmitted to the CDN provider.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the website). The data is used solely for font delivery and is not processed further after the transfer is complete.

For more information, see Fontshare's Privacy Policy.

6. External Links (LinkedIn)

This website contains links to the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland).

These are simple hyperlinks (no embedded plugins or social buttons that automatically transmit data). Data is only transferred to LinkedIn when you actively click the link and visit the LinkedIn website. From that point, LinkedIn's Privacy Policy applies.

7. Your Rights as a Data Subject

You have the following rights with respect to the personal data concerning you:

• Right of access (Art. 15 GDPR): You may request information about the personal data we process.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): Under certain circumstances, you may request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data where processing is based on legitimate interests pursuant to Art. 6(1)(f) GDPR.
• Right to withdraw consent (Art. 7(3) GDPR): Any consent given may be withdrawn at any time with effect for the future.

To exercise your rights, please contact: johannes@bracke-engineering.de

8. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR). The competent supervisory authority for our registered office in Hesse is:

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the padlock symbol in your browser bar.

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

10. Updates to this Privacy Policy

This privacy policy is currently valid and dated April 2026. Due to the further development of this website or changes to legal or regulatory requirements, it may be necessary to amend this privacy policy. The current version is available on this page at all times.