Privacy Policy

§ 1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Kersten Lorenz (Interlusion), Lübecker Straße 34, 44135 Dortmund, Germany. Contact: hello@interlusion.dev.

No data protection officer has been appointed, as the legal requirements for one (Art. 37 GDPR, § 38 BDSG) are not met. Please send data protection enquiries to the email address above.

§ 2 Scope

This privacy policy applies to the website interlusion.dev and to contacting us via the contact form or by email. It uses the terms of the GDPR (in particular “personal data”, “processing”, “processor”) as defined in Art. 4 GDPR.

§ 3 Visiting the website

When you visit the website, your browser automatically sends technical data to the server, in particular:

• IP address,
• date and time of access,
• requested page and referrer URL,
• browser and operating system,
• amount of data transferred.

This data is processed to deliver the website and keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a working and secure website. It is not combined with other data sources.

§ 4 Hosting by Cloudflare

The website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”) on Cloudflare Pages. As part of hosting, its content delivery network and its security features, Cloudflare processes the access data listed in § 3. These security features include a small script that protects the email addresses shown on the website from being harvested by spam programs; it sets no cookies.

Cloudflare processes the data as a processor under a data processing agreement pursuant to Art. 28 GDPR. The transfer to the USA is permitted on the basis of the EU Commission's adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified; standard contractual clauses (Art. 46 (2) (c) GDPR) apply in addition. For more information see Cloudflare's privacy policy .

§ 5 Contact form

When you use the contact form, we process the data you enter: name, email address, the type of your project and your message. The data is sent encrypted to a server function at Cloudflare (see § 4), which turns it into an email to us. To send this email we use the Resend service of Resend, Inc., USA. The email arrives in our mailbox at webgo GmbH, Hamburg, where it is processed within Germany. The website itself does not store the form data. Name, email address and message are required; without them we cannot answer your enquiry. The type of project is optional.

We process the data to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest is answering enquiries.

§ 6 Contact by email

When you email us, we process your email address, your name if given, and the content of your message to answer your enquiry. Our mailbox is hosted by webgo GmbH, Hamburg (see § 5). The legal bases are those of § 5.

§ 7 No cookies, no analytics

The website sets no cookies and stores no data in your browser's storage (local storage, session storage). No analytics, tracking or advertising services are used, and no profiles are created. There is no automated decision-making, including profiling (Art. 22 GDPR). Your device is accessed only as far as is strictly necessary to display the website (§ 25 (2) no. 2 TDDDG).

§ 8 Fonts, external links and share links

The fonts used on the website are served from our own server and are not loaded from third parties. The website does not embed content from other providers (such as videos or maps).

Links to other websites, including the share links below blog posts (for example to LinkedIn or X), are plain links: data is sent to the respective provider only when you click such a link. That provider is then responsible for any further processing.

§ 9 Transfers to third countries

Personal data is transferred to countries outside the European Economic Area for hosting by Cloudflare (§ 4) and for sending contact enquiries via Resend (§ 5). Such transfers take place only where an adequacy decision of the EU Commission exists (Art. 45 GDPR), for example for companies certified under the EU-US Data Privacy Framework, or appropriate safeguards pursuant to Art. 46 GDPR are in place, in particular standard contractual clauses.

§ 10 Storage period

We store personal data only for as long as is necessary for the respective purpose. We delete contact enquiries once they have been fully dealt with, unless statutory retention obligations apply (in particular § 147 AO and, where applicable, § 257 HGB, for example if the enquiry leads to an order). Cloudflare stores the access data listed in § 3 only for as long as is necessary to deliver and secure the website.

§ 11 Recipients

Recipients of personal data are the processors named above (Cloudflare, Resend, webgo) and public authorities where there is a legal obligation to disclose data. Data is not passed on for advertising or market research.

§ 12 Your rights

You have the following rights towards us:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object (Art. 21 GDPR, see § 13).

To exercise your rights, an email to hello@interlusion.dev is enough.

§ 13 Right to object

Where we process your data on the basis of Art. 6 (1) (f) GDPR, you may object to this at any time on grounds relating to your particular situation (Art. 21 (1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal objection to hello@interlusion.dev is enough.

§ 14 Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany

§ 15 Data security

We take appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data. The website and the contact form are only reachable over an encrypted connection (TLS).

§ 16 Changes

We update this privacy policy when the law or our processing changes. The version published here applies.