Privacy policy

This page explains what happens with your data when you visit yap.nicremo.de. It covers this website only. How the Yap app handles audio and text is described in the app's privacy notes.

Controller

Overview

This website sets no cookies, runs no analytics and loads no content from third parties such as Google Fonts, maps or videos. Your appearance choice (light, dark or system) is kept in your browser's local storage and never leaves your device. Only the data needed to deliver the pages and to answer emails is processed.

Hosting and server logs

The website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you open a page, Vercel processes technically necessary data: IP address, date and time, requested address, referrer, browser and operating system (user agent), amount of data transferred and status code.

The purpose is the secure and stable delivery of the website, including protection against attacks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in operating the website reliably and securely. Log data is kept only as long as needed for these purposes and then deleted.

Vercel acts as a processor under a Data Processing Addendum. Vercel is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by the European Commission's adequacy decision under Art. 45 GDPR.

Name resolution (DNS)

The name servers of nicremo.de are operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare only answers the question at which address the website can be reached; the pages themselves are not delivered through Cloudflare. The legal basis is Art. 6(1)(f) GDPR. Cloudflare is also certified under the EU-US Data Privacy Framework.

Contact by email

If you send me an email, I process your address and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise Art. 6(1)(f) GDPR. Messages are deleted once the request is settled and no legal retention duties apply. The email providers involved act as processors.

Fonts and external links

The fonts Geist and Instrument Serif are served from this website; loading them opens no connection to Google or any other provider. Links to GitHub are plain links. Data only reaches GitHub when you follow such a link, and GitHub's privacy policy applies there.

Encryption

All pages are delivered exclusively over HTTPS with TLS encryption.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). An informal email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Providing your data is neither legally nor contractually required. No automated decision making, including profiling, takes place.