Privacy policy

This page explains what happens to your personal data when you visit this site or subscribe to Dennis Doerflinger. The person responsible is Dennis Dörflinger, c/o Online-Impressum 4974, Europaring 90, 53757 Sankt Augustin, Germany. You can reach me at dorflingerdennis@gmail.com.

Visiting this site

This site is hosted by Vercel. To deliver a page, Vercel processes your IP address, the address of the page, the time, your browser and the page you came from. The legal basis is Art. 6(1)(f) GDPR: my legitimate interest in running a working and secure website.

The site has no analytics, no advertising and no social media plugins, and it sets no cookies for visitors. Its fonts are served from this site.

Some older issues in the archive still load images from Buttondown, the service this newsletter used before, and from the Amazon S3 storage it uses. When you open one of those issues, your browser connects to those servers, and they see your IP address.

Subscribing

To subscribe, you enter your email address, and I send you a link to confirm it. You only receive the newsletter after clicking that link. I store your email address, how you signed up, and the dates of your signup and confirmation, so that I can send you the newsletter and show that you agreed to it.

The legal basis is your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with the unsubscribe link in every email or by writing to me. Giving your address is voluntary, but I can't send you the newsletter without it.

To stop abuse of the signup form, your IP address is kept for a short time to limit repeated attempts. It is not linked to your email address. The legal basis is Art. 6(1)(f) GDPR.

If you subscribed before October 2026, you did so through Buttondown, and your address and subscription status were moved here.

Sending the newsletter

Emails are sent through Amazon Simple Email Service in Frankfurt. Amazon receives your email address and the content of each email, and reports back whether it was delivered, bounced or marked as spam. I store these results so that I can stop emailing addresses that no longer work or that complained.

Opens and clicks

Each newsletter contains a tiny invisible image, and its links pass through Amazon's tracking address (awstrack.me). This records whether and when you opened an issue and which links you clicked. I use this to see which topics are useful and to find readers who are no longer interested. Amazon sees your IP address and browser when the image or a link loads, but I don't store them.

The legal basis is your consent when you subscribe, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Unsubscribing ends it. If your email app blocks images, opens are not recorded.

If you haven't opened or clicked recent issues, I may email you once to ask whether you want to stay. If you don't answer within two weeks, you stop receiving the newsletter.

Who processes your data

• Vercel Inc. (USA): hosts this site. The application runs in Frankfurt.
• Supabase: hosts the database in Frankfurt.
• Amazon Web Services: sends the emails and reports their results, in Frankfurt.
• Buttondown: holds the subscriber list from before the move until that account is closed.

These companies process data on my behalf. Where data reaches the United States, the transfer relies on the EU-US Data Privacy Framework or the EU's standard contractual clauses. I don't sell your data or share it for advertising.

How long data is kept

Your data is kept for as long as you are subscribed. If you unsubscribe, or your address bounces or complains, I keep the address marked as blocked, so that you are never emailed again and I can show what happened. The legal basis is Art. 6(1)(f) GDPR.

If you ask me to delete your data, I remove your address and its sending history. Copies in automatic database backups disappear when those backups expire.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing and to receive it in a portable format. You can withdraw your consent at any time, and you can object to processing based on Art. 6(1)(f) GDPR. To do any of this, write to dorflingerdennis@gmail.com. You can also complain to a data protection supervisory authority.

No automated decisions with legal effect are made about you. For my contact details, see the imprint.