Privacy Policy

This page describes what happens to your data when you visit this site. It is deliberately short, because the site collects little.

Data controller

Transformbau Tischlerei Erdmann, owner Erik Erdmann, Späthstraße 50, 12437 Berlin, Germany. Telephone +49 (0)30-47 366 366. Full contact details are in the Impressum.

The controller within the meaning of the GDPR is Erik Erdmann.

When you open the site

This site is hosted by Vercel Inc. Opening a page transmits technically necessary data to the server, including your IP address, the time of the request and the address requested. A website cannot be delivered without this.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in operating the site securely.

Cookies

This site sets exactly one cookie: NEXT_LOCALE. It remembers whether you are reading the German or the English version and contains nothing else. It serves that function alone and is therefore set without consent (§ 25(2) TTDSG).

There is no consent banner on this site, because there is nothing to ask consent for.

Audience measurement

We use Vercel Web Analytics. It works without cookies and without recognising individuals; page views, referrers and device types are counted in aggregate.

We additionally count a small number of events on our own servers, such as opening the contact form. Your IP address and browser signature are immediately reduced to a salted digest that changes daily. Neither the IP address nor the browser signature is stored, and no person can be recovered from the digest.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in knowing whether the site does its job. Stored totals are deleted after 400 days.

Contact form

If you write to us through the form, we process what you enter there: your name, your e-mail address and your message. These are used solely to answer your enquiry.

Delivery runs through the service provider Resend. The message itself is not stored in our database; what is stored is only that an enquiry arrived and by which route — no name, no address, no message text.

The legal basis is Art. 6(1)(b) GDPR where a commission is being discussed, otherwise Art. 6(1)(f) GDPR.

Protection against automated submissions

The contact page — and only that page — runs Cloudflare Turnstile. It checks whether the form is being filled in by a person or by a program. Code belonging to Cloudflare Inc. runs in your browser and evaluates technical characteristics of your device and behaviour.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in protecting the form from abuse.

Transfer to the United States

Vercel, Cloudflare, Resend and Upstash are companies based in the United States, or have a US parent. Data may therefore be transferred to the USA.

The United States does not offer a level of data protection equivalent to the European one. In particular, US authorities may under certain conditions access data without an effective legal remedy being available.

Your rights

You have the right of access to the data held about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).

Where we process data on the basis of a legitimate interest, you may object to that processing (Art. 21 GDPR). An informal message to the address in the Impressum is sufficient.

You may also complain to a supervisory authority. The competent one is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.