Privacy Policy
Last updated: March 2026
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Brumm Labs GbR
Schimmelmannstr. 5, 22043 Hamburg, Germany
Email: privacy@brummlabs.com
Further information about the company can be found in the Legal Notice.
General Information on Data Processing
We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Using our website is generally possible without providing personal data. Where personal data is collected on our pages, this is done on a voluntary basis.
The legal bases for processing personal data are in particular Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(f) GDPR (legitimate interests), and Art. 6(1)(a) GDPR (consent).
You have the right to obtain information about your stored personal data, its origin and recipients, and the purpose of data processing at any time. You also have the right to request the correction, blocking, or deletion of this data.
Hosting
Vercel
This website is hosted by Vercel Inc. When you visit our website, information is automatically stored in server log files that your browser transmits.
Retention period: Server log data is typically retained by Vercel for 30 days and then automatically deleted.
Data processed: IP address, browser type and version, operating system, referrer URL, date and time of access.
Purpose: Delivery of the website via CDN and edge network for optimal performance and availability.
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable website delivery).
Data transfer: USA. Vercel uses Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.
Vercel Privacy Policy: https://vercel.com/legal/privacy-policy
Data Processing Agreement (DPA) Vercel: https://vercel.com/legal/dpa
Web Analytics
Vercel Web Analytics
We use Vercel Web Analytics to analyze website traffic.
Vercel Web Analytics operates without cookies and does not store any personally identifiable information. Only aggregate data is collected (page views, visitor counts, referral sources).
Since no cookies are set and no personal data is processed, no cookie consent is required.
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding website usage).
Vercel Analytics information: https://vercel.com/docs/analytics
Contact Form
Email Delivery via Resend
Through the contact form, we collect the following data: name, email address, message content.
Purpose: Processing and responding to your contact inquiry.
For email delivery, we use Resend Inc., San Francisco, CA, USA as a data processor.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at the request of the data subject).
Data retention: Emails are stored until your inquiry is fully resolved and then deleted.
Data transfer: USA. Resend uses Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.
A Data Processing Agreement (DPA) is in place with Resend Inc.
Resend Privacy Policy: https://resend.com/legal/privacy-policy
Your Rights as a Data Subject
You have the following rights with respect to the personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR) — without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal
Right to lodge a complaint with the competent supervisory authority.
The competent supervisory authority is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, Email: mailbox@datenschutz.hamburg.de, Website: https://datenschutz-hamburg.de
Automated Decision-Making
No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption, which is automatically provided by Vercel. You can recognize an encrypted connection by the address bar of your browser changing from 'http://' to 'https://'.