Privacy - Privacy Policy

The controller responsible for this website under the General Data Protection Regulation (GDPR) is:

vDL Digital Ventures GmbH
Jägerweg 10
85609 Aschheim
Germany

Email: hello@vdl.digital

This policy explains how we process personal data when you visit vdl.digital, contact us through the website, or interact with our public online presence. We process personal data only where there is a legal basis under the GDPR and only for the purposes described below.

The website is hosted by Vercel Inc., United States. When you visit the website, technical request data may be processed to deliver the site, maintain security, diagnose errors, prevent abuse, and keep the service available. This may include your IP address, request time, requested URL, referrer, user agent, and technical status information.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are secure, reliable, and efficient delivery of the website. Where Vercel processes personal data on our behalf, it acts as a processor under a data processing agreement.

Further information is available in Vercel's Privacy Notice and Data Processing Addendum.

We use Vercel Web Analytics to understand how the website is used and to improve its content, performance, and structure. Vercel Web Analytics is designed as privacy-friendly, first-party analytics. It does not use cookies. Visitors are identified by a hash created from the incoming request, which may involve transient processing of technical request data such as IP address and user agent. The visitor session is discarded after 24 hours. The data is available to us only in aggregated form.

Analytics data points may include the event timestamp, page URL or route, referrer, filtered query parameters, approximate geolocation, device type, operating system, browser information, and analytics script version. We do not use Vercel Web Analytics to identify you personally, track you across different websites, or create marketing profiles.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is privacy-preserving reach measurement and improvement of the website. You may object to this processing on grounds relating to your particular situation under Art. 21 GDPR by contacting us at hello@vdl.digital. Because analytics data is aggregated and not tied to directly identifying account data, we may not be able to isolate historical analytics entries for a specific visitor.

More information is available in Vercel's Web Analytics privacy and compliance documentation.

We use Vercel Speed Insights to measure real-user website performance and identify technical issues that affect user experience. Speed Insights collects Web Vitals and related performance data by using native browser APIs and reporting the resulting measurements to Vercel.

According to Vercel, Speed Insights data points are anonymous and are not tied to, or associated with, an individual visitor or IP address. Data points may include the route, URL, network speed, browser, device type, device operating system, country, Web Vital values, Web Vital attribution, SDK information, and server-received event time.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is measuring and improving the technical performance, reliability, and usability of the website. You may object to this processing on grounds relating to your particular situation under Art. 21 GDPR by contacting us at hello@vdl.digital. Because Speed Insights data points are anonymous and not tied to directly identifying account data, we may not be able to isolate historical entries for a specific visitor.

More information is available in Vercel's Speed Insights privacy and compliance documentation.

If you contact us through the contact form or by email, we process the information you provide, such as your name, email address, company, phone number, budget range, message content, and any other information you choose to include.

We use this data to respond to your inquiry, discuss potential projects, prepare or perform contracts, and keep business records where required. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR for general business communication and documentation.

The contact form sends email through Resend, operated by Plus Five Five, Inc., United States. Resend processes inquiry data on our behalf for email delivery. Further information is available in Resend's Data Processing Addendum.

The website links to external profiles such as GitHub and X. These are normal outbound links. If you follow them, the respective platform is responsible for its own processing of personal data. Please review the privacy notices of those platforms before using them.

Some service providers are based outside the European Economic Area, including in the United States. Where personal data is transferred internationally, we rely on available transfer mechanisms such as an adequacy decision, certification under the EU-US Data Privacy Framework, or EU Standard Contractual Clauses where applicable. Vercel states that it is certified under the EU-US Data Privacy Framework.

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law. Technical logs are kept only as long as needed for security, troubleshooting, and operational purposes. Vercel Web Analytics visitor-session data is discarded after 24 hours according to Vercel documentation. Vercel Speed Insights data points are processed in anonymous form according to Vercel documentation. Contact inquiries are kept while needed to process the request and, where relevant, for statutory retention periods for business correspondence.

Subject to the legal requirements, you have the right to request access to your personal data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, contact us at hello@vdl.digital. You also have the right to lodge a complaint with a data protection supervisory authority. For private-sector companies in Bavaria, the competent authority is generally the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

We do not use automated decision-making within the meaning of Art. 22 GDPR on this website.

We may update this privacy policy when our website, service providers, or legal requirements change. The current version is dated June 13, 2026.