Privacy policy

Controller

Matthias Braun Krankenhausstraße 42 89231 Neu-Ulm Germany Email: info@mbraun-dev.de Phone: +49 151 61134007

Overview

This website does not use any analytics or marketing services, advertising trackers or cookies for analytics or advertising purposes. Fonts are delivered from the website’s own server; no connections to Google Fonts are established for this. Personal data is only processed to the extent necessary to provide the website and to handle inquiries.

Provision of the website and server log data

When the website is accessed, the hosting provider processes technically necessary data, in particular the IP address, date and time of access, the page requested, the amount of data transferred, the referrer and browser and operating system information. This is necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR. The website is hosted by Vercel Inc. (USA). The connection is encrypted using TLS.

Project inquiry via the inquiry form

If you use the inquiry form, the following details are processed: industry, project type, goals, desired features and timeframe; optionally a budget range and selected services or packages from the catalogue with the non-binding cost estimate calculated for them; the language of the page from which you send the inquiry; name and email address; optionally company, phone number, existing website and a message; optionally up to three files (PDF, JPG, PNG or WebP, 4 MB in total) as well as the time at which you confirmed the privacy information.

The details are used to process your inquiry, to contact you and to prepare a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). Required fields are marked as such; without them, the inquiry cannot be processed.

To protect against automated mass inquiries, your IP address is briefly processed in the server’s working memory when you submit the form in order to limit the number of inquiries per period. It is not stored in the database. The legal basis is Art. 6(1)(f) GDPR.

Storage of inquiries

Inquiries and attached files are stored in a database and in a non-public file storage of the provider Supabase Inc., which processes them on my behalf. Only Matthias Braun has access, via a password-protected admin area. Files are only retrieved there via time-limited download links.

Email notification about new inquiries

I am notified about new inquiries by email via the delivery service Resend, Inc. (USA). The notification contains name, company, industry, project type, goals, features, timeframe, budget range, the selected catalogue items with the non-binding cost estimate and the number of attachments, and is delivered to my business email inbox under the domain mbraun-dev.de. You do not receive any automatic email or advertising. The legal basis is Art. 6(1)(b) GDPR.

Contact by email, phone or WhatsApp

If you contact me by email, phone or WhatsApp, I process the details you provide in order to handle your request (Art. 6(1)(b) GDPR). When you use WhatsApp, data is also processed by WhatsApp or Meta; their privacy policies apply. The WhatsApp link on this website only transfers data to WhatsApp when it is clicked.

Transfers to third countries

The providers named are based in the USA. Where personal data is transferred there, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the standard contractual clauses of the EU Commission agreed with the providers.

Storage period

Inquiries that do not lead to a contract are deleted six months after the last contact. To this end, the stored inquiries are reviewed regularly. If a contract is concluded, the data is stored for as long as is necessary to perform the contract and beyond that only to the extent that statutory retention obligations exist, in particular under commercial and tax law (up to ten years).

Cookies in the admin area

No cookies are set on the public pages. In the password-protected admin area, technically necessary session cookies are used for logging in (§ 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act).

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise these rights, please contact the address given above. You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht).

As of: September 2026