Privacy policy
This privacy policy explains the nature, scope and purposes of processing personal data in connection with this online offering (the “Website”) at the domain(s) or URLs where it is reachable. The controller within the meaning of the General Data Protection Regulation (GDPR) is Michael Krämer. This text is provided for transparency under Articles 13 and 14 GDPR where applicable. It does not replace individual legal advice and does not constitute a binding legal assurance to supervisory authorities or third parties. If you extend the site (e.g. contact forms, shop, newsletter, embedded third-party content), the policy should be reviewed and updated accordingly.
1. Definitions and scope
“Personal data” means any information relating to an identified or identifiable natural person (Article 4(1) GDPR). “Processing” means any operation performed on personal data (Article 4(2) GDPR). This policy applies to the Website as described here. It does not apply to external websites linked from the Website.
2. Controller and contact
Controller: Michael Krämer
E-mail: info.m.kraemer@gmail.com
No data protection officer has been appointed unless a legal obligation to appoint one exists. For questions about this privacy policy and for requests concerning data subject rights, please use the e-mail address above.
3. Hosting, provision of the Website and server logs
The Website is hosted and delivered via Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). When you retrieve pages, Vercel and technically upstream systems process in particular: IP address of the requesting device, date and time of the request, requested resource (URL), amount of data transferred, HTTP status, referrer URL if transmitted, browser type and version if transmitted. Processing serves technical delivery, stability and security of the service and abuse detection.
The legal basis is Article 6(1)(f) GDPR (legitimate interests in secure and efficient operation of a website). Where Vercel processes data on our behalf as a processor, a data processing agreement pursuant to Article 28 GDPR is in place under the platform’s standard terms. Further information: https://vercel.com/legal/privacy-policy
Processing may involve transfers to a third country (the United States). Where no adequacy decision exists, we rely on appropriate safeguards under Article 46 GDPR (in particular the EU Commission’s Standard Contractual Clauses) and/or on the EU–US Data Privacy Framework where the recipient is certified — please refer to Vercel’s current privacy policy for details.
4. Retention (hosting and logs)
Retention periods for technical logs at Vercel follow Vercel’s documented deletion and retention practices. We do not maintain additional visitor log files on our own systems beyond hosting, unless statutory retention duties apply.
5. Fonts (Next.js next/font, Google Fonts source)
The Website uses the typefaces “Inter” and “Playfair Display” via Next.js next/font/google. Font files are obtained from the Google Fonts catalogue during the application build and bundled into the deployment. In normal production operation, visitors’ browsers load font files from the same origin as the Website (self-hosted within the deployment) without a separate live font request from the visitor’s browser to Google Fonts servers for displaying text. Google does not set cookies for font delivery in this setup.
The legal basis for technically necessary provision of a readable site is Article 6(1)(f) GDPR. Processing by Google in connection with builds may additionally occur; see Google LLC’s privacy information.
Note: If you later switched to a classic remote stylesheet link to Google Fonts, the legal assessment (including consent / ePrivacy rules) would change — this policy would need updating.
6. Language preference (local storage)
When you select a language (German or English) in the interface, your choice is stored locally in the browser under the key “alethemora-language”. This is not an HTTP cookie but an entry in the browser’s local storage. The sole purpose is to restore your language choice on a later visit.
The legal basis is Article 6(1)(f) GDPR (legitimate interests in user-friendly, consistent presentation). Where consent is required or given, Article 6(1)(a) GDPR may additionally apply. You may delete the stored value at any time via your browser settings (site data / local storage).
Note: If your browser synchronises storage with the vendor’s cloud, data may be stored outside your local device; we have no control over that.
7. Cookies and similar technologies
We do not use advertising cookies, social plug-ins with tracking, or embedded analytics tools (such as Google Analytics or Meta Pixel) in the configuration described here. Technically necessary processes within hosting (see section 3) remain unaffected.
If non-essential cookies or similar technologies are introduced in the future, we will comply with the German Telecommunications Telemedia Data Protection Act (TTDSG) and the GDPR (including consent where required) and will update this policy.
8. No contact forms, user accounts or newsletter
This Website does not implement a contact form, registration, user profiles or a newsletter system. Accordingly, we do not operate separate processing for those features.
9. Recipients and categories of recipients
Personal data are disclosed to third parties only where necessary to perform the contract with the hosting provider, where a legal obligation applies or where you have consented. In the scope described here, Vercel is in particular a recipient as hosting platform.
10. No solely automated decision-making
We do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).
11. Your rights (Articles 15–21 GDPR)
Subject to applicable law, you have in particular the following rights:
Access (Article 15 GDPR) to stored data concerning you,
Rectification (Article 16 GDPR),
Erasure (Article 17 GDPR),
Restriction of processing (Article 18 GDPR),
Data portability (Article 20 GDPR),
Objection to processing based on Article 6(1)(f) GDPR (Article 21(1) GDPR): we no longer process personal data after an objection unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or processing is necessary for the establishment, exercise or defence of legal claims.
To exercise your rights, please contact us at the e-mail address in section 2.
12. Withdrawal of consent
Where processing is based on consent pursuant to Article 6(1)(a) GDPR, you may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
13. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority about our processing of personal data (Article 77 GDPR). The authority competent for you is typically that of your habitual residence, your place of work or the place of the alleged infringement.
14. Obligation to provide data
Processing technical connection data when you access the Website is technically necessary to deliver and secure the Website. Use of the Website without such processing is not possible.
15. Changes to this privacy policy
We may update this privacy policy to reflect legal changes or changes to our services. The version published on the Website at the relevant time applies.
16. Version
Version of this privacy policy: May 2026