Note: this is a translation provided for convenience. The German version is the legally binding text.
Last updated: 2026-08-12
When you visit this website, our hosting provider Vercel automatically stores information in what are known as server log files. This covers your IP address (anonymised), your browser and operating system (user agent), the date and time of access, the URL requested and the referrer URL.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the proper operation and security of the website).
If you sign up for a newsletter, we process your first name and your email address solely in order to send it. Sign-up uses the double opt-in procedure: your details are stored with MailerLite when you submit the form, and you then receive a confirmation email. No newsletter is sent until you have confirmed the link it contains. If you do not confirm, the entry is not used for sending.
Legal basis: Art. 6(1)(a) GDPR (consent).
To protect the forms against automated bulk submissions we limit how often a form can be sent. Your IP address is transmitted to Upstash and stored there for a rolling window of 10 minutes in order to count submissions. The entry is deleted automatically once the window has passed. No analysis beyond this takes place, and the data is not combined with any other data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse and keeping the service available).
Data captured through lead forms on this website is additionally backed up in a database at Supabase (EU region). This serves data security and resilience.
Legal basis: Art. 6(1)(a) GDPR (consent).
This website is hosted by:
Vercel Inc.A data processing agreement (DPA) under Art. 28 GDPR is in place with Vercel. Further information: vercel.com/legal/privacy-policy
Vercel Web Analytics: this website uses Vercel Web Analytics. The analysis runs without cookies and stores no personal data. The visitor ID is derived by hashing non-personal signals and does not allow any individual to be traced.
We use MailerLite to send newsletters:
MailerLite LimitedA data processing agreement (DPA) under Art. 28 GDPR is in place with MailerLite. All newsletter sign-ups use the double opt-in procedure. You can withdraw your consent at any time using the unsubscribe link in every newsletter email.
Further information: mailerlite.com/legal/privacy-policy
We use the following provider as a backup for lead form data:
Supabase, Inc.A data processing agreement (DPA) under Art. 28 GDPR is in place with Supabase. The data is stored until you withdraw your consent.
We use the following provider to rate limit form submissions:
Upstash, Inc.Only the IP address is processed, and only to count submissions within a 10 minute window. Storage takes place in a database instance in the EU. A data processing agreement (DPA) under Art. 28 GDPR is in place with Upstash. Further information: upstash.com/trust/privacy
This website uses no cookies for tracking or analytics. Browser local storage is used solely to remember your consent decision (cookie banner). No third-party cookies are set.
You can change your decision at any time. The Cookie settings link in the footer of every page reopens the dialog and lets you withdraw consent you gave earlier (Art. 7(3) GDPR). Withdrawing is as easy as giving consent.
As a data subject you have the following rights against the controller:
To exercise your rights, please contact us by email at markus@pmcos.de
You have the right to lodge a complaint with the competent data protection supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)