Data Protection
This privacy notice explains how personal data is processed on this website in accordance with the General Data Protection Regulation (GDPR), in particular Articles 12 to 14 GDPR.
1. Controller (Article 4(7) GDPR)
Timon Hass
Schwenckestraße 109
20255 Hamburg
Germany
Email: hi@timonhass.com
2. Hosting and Log Files
This website is hosted via Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit this website, technical server and delivery log data may be processed automatically (for example IP address, date and time, requested file, referrer, browser, device information, and operating system). Processing is carried out for technical operation, content delivery, stability, and security of the website.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in secure operation, secure delivery, and defense against misuse).
Vercel acts as a hosting and infrastructure service provider. Further information can be found in Vercel's privacy information and data processing terms: Privacy Policy and Data Processing Addendum.
3. Contact by Email
If you contact us by email, the data you provide (for example name, email address, message, and any attachments) is processed to handle your request.
Legal basis: Article 6(1)(b) GDPR (pre-contractual/contractual communication) and/or Article 6(1)(f) GDPR (general communication).
4. Cookies and Similar Technologies
According to the current implementation, this website does not use optional tracking or marketing cookies.
If technically necessary cookies are used, they are limited to required website functionality. If analytics or marketing tools are added in the future, this section will be updated and, where required, consent will be requested before processing.
5. External Links and Social Media
This website includes links to external services (for example LinkedIn and X). These services are only contacted after you click the respective link. Their operators process data under their own responsibility.
Contact via email is provided as a mailto link. Clicking the link opens your local email client. No contact form is used on this website.
6. Recipients and International Transfers
Personal data may be disclosed to technical service providers that process data on our behalf (Article 28 GDPR), in particular Vercel as hosting and delivery provider. Because Vercel may process data in the United States or other countries outside the EEA, personal data may be transferred to third countries. Such transfers are carried out only under the conditions of Chapter V GDPR, for example on the basis of adequacy decisions or standard contractual clauses.
7. Storage Periods
We store personal data only as long as necessary for the stated purposes and legal retention obligations. Once the purpose no longer applies and retention periods have expired, the data is deleted.
8. Your Rights
Under the GDPR, you have the right to access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and objection (Article 21).
You also have the right to withdraw consent at any time with future effect (Article 7(3) GDPR), where processing is based on consent.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, especially in the Member State of your habitual residence, place of work, or place of the alleged infringement (Article 77 GDPR).
10. Security and Changes
We apply appropriate technical and organizational measures to protect personal data. This privacy notice may be updated to reflect legal, technical, or business changes.
Last updated: March 11, 2026.