Privacy Policy
Last updated: 8 November 2026
1. The short version
This is the website of Übelacker Solutions GmbH. It has no accounts, no newsletter, no comments and no advertising.
Visiting it creates short-lived server logs. If you accept cookies, we use Google Analytics to see roughly how many people visit and which pages they read, and Google reCAPTCHA to keep spam out of the contact form. If you send us a message, we receive it by email so that we can reply.
We do not sell your data, we do not build profiles, and we never use your message for advertising.
2. Who is responsible
Übelacker Solutions GmbH
Bläsiring 28
4057 Basel
Switzerland
support@uebelacker.dev
We are the controller for the processing described here, under the Swiss Federal Act on Data Protection (FADP) and, where they apply, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Data protection officer. We have not appointed one. Our processing does not meet the conditions in Art. 37 GDPR — we are not a public authority, we do no large-scale regular monitoring, and we do no large-scale processing of special categories of data. If that changes, we will appoint one and say so here.
Representatives in the EU/EEA and the UK (Art. 27 GDPR and UK GDPR). If you are in the EU, the EEA or the UK and have questions or concerns about your personal data, you can also contact our appointed representative:
EU representative
Euverify Limited (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork
T23 AT2P
Ireland
gdpr@euverify.com
UK representative
Euverify Ltd (UK)
3rd Floor
86–90 Paul Street
London
EC2A 4NE
United Kingdom
gdpr@euverify.com
To submit a data subject access request (DSAR), a deletion request or any other GDPR-related enquiry, you can use our representative's secure portal. It also lets you verify that we have appointed them. Requests submitted there are logged and tracked so that they are answered on time.
You can still reach us directly at the address and email above, in German or English.
3. Hosting and server logs
This site is hosted by Vercel and served from its Frankfurt region. Visiting it creates the usual web server log entries: IP address, time, page requested and browser identification.
Purpose: operating the site and keeping it secure.
Legal basis: our legitimate interest in a working, secure website, Art. 6(1)(f) GDPR.
Retention: 24 hours — that is how long our host keeps its runtime logs, and we copy them nowhere else.
We do not use these logs to identify you.
Fonts are served from this site itself, not from a font provider. Images on the blog cards are fetched and resized by our server, so your browser does not contact the sites they come from.
4. Cookies and analytics
Until you accept the cookie notice, this site sets no cookies and loads nothing from Google.
If you accept, we use Google Analytics with IP anonymisation switched on, to see roughly how many people find the site and which pages they read. Accepting also loads Google reCAPTCHA v3, which the contact form needs — see section 5.
Legal basis: your consent, Art. 6(1)(a) GDPR.
Retention: analytics data is deleted after 14 months.
Changing your mind. You can withdraw or change your consent at any time through the Cookie settings link in the footer of every page — it is exactly as easy as giving it was. Withdrawing does not affect processing that already happened.
| Cookie | Purpose | Duration |
|---|---|---|
uebelacker_cookie_consent | Remembers that you accepted the notice | 12 months |
_ga, _ga_* | Google Analytics — distinguishes visitors | 24 months |
| reCAPTCHA cookies | Google reCAPTCHA — spam protection on the contact form | Session to 6 months |
5. The contact form
You can write to us through the contact form or with the mail command in the terminal on the home page. Both send the same thing: your email address, a subject and your message.
Both are protected by Google reCAPTCHA v3, which is why they are available only once you have accepted cookies. Google's terms and privacy policy apply to that check.
Your message reaches us by email through Mailgun, and is kept in our mailbox at Google Workspace (Gmail).
Purpose: answering you.
Legal basis: your consent in sending the message, and our legitimate interest in replying, Art. 6(1)(a) and (f) GDPR.
Retention: 12 months after the conversation ends, so we can follow up sensibly. Then deleted — unless the conversation leads to a contract, in which case we keep what the law requires us to keep for business records.
We never use your address or message for advertising. You can always email support@uebelacker.dev directly instead, with no reCAPTCHA and no cookies.
6. Links to other sites
This site links to profiles and articles elsewhere — GitHub, LinkedIn and the sites our blog posts are published on. Nothing is loaded from them until you follow a link. Once you do, their own privacy policies apply.
7. Legal bases at a glance
| What we do | Legal basis |
|---|---|
| Server logs | Legitimate interest — Art. 6(1)(f) GDPR |
| Analytics | Consent — Art. 6(1)(a) GDPR |
| reCAPTCHA on the contact form | Consent — Art. 6(1)(a) GDPR |
| The contact form | Consent and our legitimate interest in replying — Art. 6(1)(a) and (f) GDPR |
Where we rely on a legitimate interest, you can object at any time — see section 12.
8. How long we keep things
| What | How long |
|---|---|
| Server logs | 24 hours |
| Analytics data | 14 months |
| Consent cookie | 12 months, in your browser |
| Contact-form emails | 12 months after the conversation ends |
9. Sub-processors
| Who | What for | Where |
|---|---|---|
| Vercel | Hosting this website | USA / Frankfurt, Germany |
| Analytics, reCAPTCHA, our email inbox (Google Workspace) | USA / EU | |
| Mailgun | Delivering contact-form emails | USA / EU |
Each of these processes data only on our instructions, under a data processing agreement.
10. Where data goes, and how it is protected
Some of the providers above process data in the United States, or may do so.
For every transfer outside Switzerland and the EEA we rely on:
- the European Commission's Standard Contractual Clauses, together with the Swiss addendum recognised by the Federal Data Protection and Information Commissioner, and
- where the provider is certified under it, the EU–US Data Privacy Framework and its Swiss–US extension, and
- an adequacy decision where one covers the country concerned.
Everything travels over encrypted connections.
If you would like a copy of the safeguards for a particular provider, write to support@uebelacker.dev and we will send you what we have.
11. If something goes wrong
If personal data we hold is breached and the breach is likely to result in a risk to your rights and freedoms, we will report it to the competent supervisory authority within 72 hours of becoming aware of it, as Art. 33 GDPR and Art. 24 FADP require. If the risk to you is high, we will tell you as well.
12. Your rights
You have the right to:
- know what personal data we process about you, and get a copy;
- have it corrected if it is wrong;
- have it deleted;
- restrict how we process it;
- object to processing based on our legitimate interest;
- receive it in a portable format, and have it sent to someone else where that is technically possible;
- withdraw your consent at any time, where we rely on it, without affecting what happened before.
How to exercise them. Write to support@uebelacker.dev — or, if you are in the EU, the EEA or the UK, use our representative's portal (see section 2). We reply within one month and it costs you nothing. We will not ask you for more identifying information than the request needs.
Complaints. You can complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority in your country, and in the UK the Information Commissioner's Office (ICO).
13. Changes to this policy
We update this policy when the way this site handles data changes. The date at the top always tells you when it last changed.
14. Contact
Übelacker Solutions GmbH
Bläsiring 28
4057 Basel
Switzerland