Legal
Privacy Policy
Last updated 1 October 2026
We take the protection of your personal data seriously. This policy explains what data is processed when you visit this website, for what purpose, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for data processing on this website is:
geisterhand (company not yet founded)
Martin Wudenka, Tom Creutz, Felix Laarmann, Pierre Herzer
Freddie-Mercury-Straße 5
80797 München
Germany
Email: hello@geisterhand.dev
2. Summary
- We do not use analytics, tracking or advertising tools.
- We do not set cookies for visitors.
- We do not use social media plugins or embedded third-party content.
- Fonts are hosted on our own servers; no connection to Google Fonts is made.
- Technical data (such as your IP address) is processed only to deliver this website and its images and content.
3. Hosting
This website is hosted by Vercel Inc., USA. When you visit the site, the hosting servers automatically record information that your browser transmits (server log files): the IP address, date and time of the request, the page requested, the referring URL, and the browser and operating system used. This data is required to deliver the website securely and reliably and to detect and defend against attacks. It is not merged with other data sources.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure, technically flawless delivery of our website. We have concluded a data processing agreement with Vercel. Where data is transferred to the USA, this is based on the EU–U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses. Further information: Vercel privacy policy.
4. Content delivery (Sanity)
We manage the content and images of this website with the content platform Sanity (Sanity AS, Norway). Images are delivered from Sanity’s content delivery network (cdn.sanity.io), and your browser may connect to Sanity’s API (api.sanity.io) so that updated content appears without reloading the page. In doing so, your IP address and the technical request data listed above are transmitted to Sanity.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the fast and reliable delivery of our content. We have concluded a data processing agreement with Sanity. Further information: Sanity privacy policy.
5. Fonts
The fonts used on this website are served from our own servers. No connection is made to the servers of Google or other font providers when you load the page.
6. Cookies
This website does not set cookies for visitors. Only when authorised editors use the preview mode of our content management system is a technically necessary cookie set in their browser to show unpublished content. This applies exclusively to logged-in editors (legal basis: Art. 6 (1) (f) GDPR).
7. Contacting us
If you contact us by email, we process the data you provide (such as your name, email address and message) in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and Art. 6 (1) (f) GDPR otherwise; our legitimate interest is responding to enquiries addressed to us. We delete this data once it is no longer needed for that purpose, unless statutory retention obligations apply.
8. Links to other websites
Our website links to external sites such as LinkedIn and GitLab. These are plain links: no data is transmitted to these providers until you click a link. Once you follow a link, the privacy policy of the respective provider applies.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15 GDPR);
- have inaccurate data corrected (Art. 16 GDPR);
- have your data erased (Art. 17 GDPR);
- have the processing of your data restricted (Art. 18 GDPR);
- receive your data in a portable format (Art. 20 GDPR);
- object to processing based on our legitimate interests (Art. 21 GDPR).
To exercise these rights, please contact us at hello@geisterhand.dev or at the postal address given above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
10. Changes to this policy
We may update this privacy policy when our website or the legal requirements change. The current version is always available on this page.