Privacy Policy

This is an English courtesy translation. In the event of any discrepancy, the German version is legally binding.

Protecting your personal data matters to us. Below we explain which data is processed when you use this website, for what purpose and on what legal basis.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Havendrops UG (haftungsbeschränkt)
Klappenstraße 32
23554 Lübeck
Germany

Represented by: Marcel Möller

Phone: +49 176 57654336

Email: [email protected]

2. Your rights

You have the right at any time to access your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21 GDPR).

Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

An informal message to the contact details above is sufficient to exercise your rights.

3. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel, Germany

4. Hosting and server log files

This website runs on infrastructure operated by Havendrops UG (haftungsbeschränkt) itself (server environment "Interspark"). No external hosting provider acts as a processor; the operator of the server environment and the controller within the meaning of the GDPR are one and the same.

Each time the site is accessed, the server automatically records technical access data in what are known as server log files: IP address, date and time of access, the resource requested, the referring page (referrer), the browser and operating system used, and the HTTP status code.

This processing serves the secure and stable operation of the website and the defence against attacks. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. The log files are deleted after a short period unless they are needed to investigate a specific security incident.

5. Contact form

When you send us an enquiry via the contact form, we process the data you provide (including your name, email address, your message and optional details on project type, budget and timeframe) in order to handle your enquiry.

The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and our legitimate interest in responding to enquiries under Art. 6 (1) (f) GDPR.

Form data is transmitted via the service Formspree (Formspree, Inc., USA). Formspree processes the data on our behalf and forwards it to us by email. For details see formspree.io/legal/privacy-policy. The transfer to the USA is based on Art. 49 (1) (b) GDPR (performance of a contract).

6. Cookies and local storage

This website currently sets no analytics or marketing cookies and therefore does not display a cookie banner.

For display purposes your browser only stores your chosen appearance (light or dark theme) locally on your device (localStorage). This information remains on your device and is not transmitted to us.

7. Future reach measurement and advertising

We currently do not use any Google services (such as Google Analytics or Google Ads). Should we use such services at a later date, this will only happen after your prior, explicit consent via a cookie banner (Google Consent Mode v2). Without consent, no such services are loaded.

In that case, this privacy policy will be updated in advance to include the necessary information (purpose, recipients, transfer to third countries, storage period, withdrawal of consent).

8. Data security

The website is delivered encrypted via HTTPS (TLS) to protect the transmission of your data. We also take appropriate technical and organisational measures to safeguard your data against loss and unauthorised access.

9. Currency and changes to this privacy policy

This privacy policy is dated July 16, 2026. As the website evolves or legal requirements change, it may become necessary to adjust this policy. You will always find the current version on this page.