Skip to content
SEIDELPROJECTS

Privacy policy

For the website seidelprojects.com · Last updated 13 October 2026

This is a translation of the German version for your convenience. If the two ever differ, the German version applies. Read the German version

Summary

This website sets no cookies, embeds no external services and does not analyse how visitors use it. Personal data is processed in only two places: in the technical log data that is unavoidable when any website is delivered, and when you write to us through the contact form or by email.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

SeidelProjects GbR
Vilsendorfer Straße 47a
33739 Bielefeld
Germany
Email: kontakt@seidelprojects.de

Represented by its partners: Gerrit Stephan Seidel, Erik Seidel.

We are not legally required to appoint a data protection officer. For any questions about data protection, you can reach us at the address above.

Visiting the website (server log files)

When you visit this website, your browser sends technically necessary information to our hosting provider, which logs it temporarily:

  • IP address of the requesting device
  • date and time of access
  • name and URL of the file requested
  • amount of data transferred and whether the request succeeded
  • browser type and version
  • operating system of the device
  • previously visited page (referrer), if transmitted

Purpose and legal basis: This processing is necessary to deliver the website, to keep it stable and secure, and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely).

Retention: We do not keep logs of our own and do not combine this data with other data. We do not link it to you as a person. Our hosting provider keeps the log data only as long as needed to deliver the website and keep it stable and secure, and deletes it automatically afterwards. It does not publish a fixed retention period.

Hosting

This website is provided through Cloudflare Workers by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare runs a worldwide network of data centres; requests from Germany are usually answered within the EU. The small server function that receives the contact form also runs on Cloudflare (see below).

Cloudflare processes the log data listed above as our processor, bound by our instructions and solely to deliver and protect the website. We have a data processing agreement with Cloudflare under Art. 28 GDPR; it is part of Cloudflare's terms. For transfers to the USA, see below.

You can find the provider's privacy information at cloudflare.com/privacypolicy.

Cookies and consent

This website sets no cookies and uses no comparable techniques such as local storage that would require consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). That is why there is no consent banner here.

Analytics, tracking and advertising

We use no analytics or tracking tools, create no usage profiles and show no ads. There is no profiling and no automated decision-making.

Fonts and external content

All fonts are served from our own server. No connection is made to third-party servers, in particular not to Google Fonts. We do not embed external content such as maps, videos or social media widgets.

Contact form and email

Through the form on our contact page we process the details you enter there: your email address, the topic you choose, the content of your message and, if you give it, your name. The email address is required because otherwise we cannot reply to you.

The same applies if you email us directly. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Nothing is stored on the website. Your message is not saved in a database but forwarded to us straight away as an email.

Request limit. To prevent mass abuse of the form, it accepts at most five messages per hour from one internet connection. For this we store at Cloudflare, for at most one hour, a pseudonymised check value (hash) of your IP address, or for IPv6 of the first part of the address, together with the number of your requests. Neither the IP address itself nor the content of your message is stored for this. The entry is deleted automatically when the hour is up. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse and spam).

To send this email we use the Resend service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, as our processor. The details from the form are transmitted for this. Resend keeps the sent email, including its content, in its sending log for up to 30 days and then deletes it automatically. We have a data processing agreement with Resend under Art. 28 GDPR; it is part of Resend's terms. For transfers to the USA, see below. You can find the provider's privacy information at resend.com/legal/privacy-policy.

We delete your enquiry once it has been fully dealt with, unless statutory retention obligations require us to keep it.

To fend off automated submissions, the form contains a field you cannot see, measures the time between showing the form and sending it, and asks a simple sum. The sum contains no information about you; after sending, we store only its random identifier at Cloudflare, for at most two hours, so that it cannot be used a second time. Wrong answers count towards the request limit. None of these checks sets cookies.

Email mailbox

We receive and answer messages from the contact form, and emails you send directly to an address at seidelprojects.de or seidelprojects.com, through our mailbox at Microsoft 365 (Exchange Online). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. This involves the content of your message, your email address, your name if you give it, and the technical details that arise when sending email (for example the time and the mail servers involved).

Microsoft processes this data as our processor in data centres in the EU. We have a data processing agreement with Microsoft under Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum); it is part of Microsoft's terms. Access by the parent company Microsoft Corporation in the USA, for example for support or to fend off attacks, cannot be ruled out; see below. The legal basis and retention follow the previous section. You can find the provider's privacy information at privacy.microsoft.com.

Transfers to the USA

Cloudflare and Resend are based in the USA, and Microsoft belongs to Microsoft Corporation, which is based in the USA. Personal data may therefore be transferred to the USA or accessed from there.

On 10 July 2023 the European Commission adopted an adequacy decision for the USA (EU-U.S. Data Privacy Framework, Art. 45 GDPR). Cloudflare, Inc., Plus Five Five, Inc. (Resend) and Microsoft Corporation are certified under it. In addition, the data processing agreements of all three providers contain the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). You can check whether a company is certified at dataprivacyframework.gov.

Our apps

This policy applies only to the website. Each of our apps gets its own privacy policy before it is released.

Sharing of data

Your data is not passed on to third parties beyond the service providers named above. We do not sell data and do not share it for advertising.

Your rights

You have the following rights regarding your personal data:

  • access to the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)

Right to object: Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An informal email to kontakt@seidelprojects.de is enough.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Changes to this policy

We update this privacy policy whenever the law or our website changes. You will always find the current version on this page. This version is dated 13 October 2026.