Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is: Infinite Peak OÜ Tornimäe tn 5, 10145 Tallinn, Estonia Email: fabi@infinitepeak.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. For any data-protection question, you can contact us at any time at the address above.

2. Legal bases for processing

Where you have consented, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where your data is required to perform a contract or to carry out pre-contractual measures at your request, we process it on the basis of Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, the basis is Art. 6(1)(c) GDPR. Otherwise, processing may be based on our legitimate interest under Art. 6(1)(f) GDPR. The specific basis that applies in each case is stated in the relevant section below.

3. Storage period

Unless a more specific period is stated in this policy, your personal data remains with us until the purpose for the processing no longer applies. If you make a justified request for erasure or withdraw your consent, your data is deleted, unless we have other legally permissible grounds for storing it (for example statutory retention periods under tax or commercial law); in that case the data is deleted once those grounds no longer apply.

4. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On each request, server access data (including your IP address, the time of the request, and the requested resource) is processed to the extent technically necessary to deliver the site and to keep it secure and free of errors. The legal basis is our legitimate interest in the reliable, secure operation of the site (Art. 6(1)(f) GDPR). We have concluded a data-processing agreement with Vercel. Where personal data is processed on Vercel's infrastructure outside the EU, the transfer is safeguarded by the EU Commission's standard contractual clauses.

5. Approximate country (headline localisation)

To adapt the homepage headline, your approximate country is derived from the country code provided by the hosting/CDN provider (country level only, not a precise address). This happens server-side at the time of the request; no cookies are set for it, and your IP address is not stored for this purpose. The legal basis is our legitimate interest in relevant messaging (Art. 6(1)(f) GDPR).

6. Fonts

Fonts are served exclusively from this server (self-hosted). There is no connection to Google Fonts or other third-party servers, and your IP address is not transmitted to any third party for this purpose.

7. Cookies and tracking

This website sets no non-essential cookies and includes no analytics, remarketing or other tracking services. A consent banner is therefore not required. Should an analytics or tracking service be added in future, it will load only after your explicit consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you can withdraw at any time with effect for the future.

8. Contact form and inquiries

When you submit the contact form (or contact us by email), we process the data you provide, name, email address, optionally your company, and your message, solely to handle your request and to get in touch with you. The legal basis is the initiation or performance of a contractual relationship (Art. 6(1)(b) GDPR) and, in addition, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. To deliver your message to our inbox, we use the email service Resend (Resend, Inc., San Francisco, USA); a data-processing agreement is in place, and where data is processed outside the EU the transfer is safeguarded by the EU Commission's standard contractual clauses. We do not pass this data on to third parties beyond what is needed to deliver your message. The data is kept until your request has been dealt with and any statutory retention periods have expired. The DACH calculator runs entirely in your browser; no calculator data is transmitted to us.

9. Recipients of personal data

We only pass personal data to external parties where this is necessary to deliver the service (for example our hosting and email/form providers), where we are legally obliged to do so, or where another legal basis permits it. Where a provider acts as a processor on our behalf, we do so only on the basis of a valid data-processing agreement.

10. Your rights

You have the right to access your stored personal data and information about its origin, recipients and purpose, and the right to rectification, erasure, restriction of processing, and data portability. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future; the lawfulness of processing carried out before the withdrawal is not affected. You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.

Right to object (Art. 21 GDPR): where processing is based on our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. If you object, we will no longer process the affected data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

11. SSL/TLS encryption

For security and to protect the transmission of the content you send us, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in the address bar and the lock symbol in your browser.