← Back to home

Privacy policy

This is an English translation provided for convenience. Only the German version (Datenschutzerklärung) is legally binding.

1. Controller

Pommeranzen GmbH
Georg-Clasen-Weg 59
22415 Hamburg
Germany
represented by the managing director Dominik Pommeranz

Email:

2. General information on data processing

We process personal data of visitors to this website only to the extent necessary to operate the website, answer inquiries and arrange meetings. The following sections explain which data we process, for what purpose and on what legal basis.

Providing your data when you contact us or book a meeting is voluntary. Without it, however, we cannot handle your inquiry or the meeting. We do not use automated decision-making, including profiling.

3. Hosting (GitHub Pages)

This website is hosted on GitHub Pages. The provider is GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you visit the website, the hosting provider automatically stores access data in server log files. These include:

This data serves the secure and stable operation of the website and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and stable operation of the website). GitHub processes the data on our behalf under the GitHub Data Protection Agreement, which is part of GitHub's terms of service. Log data is stored only as long as required for secure operation.

As GitHub, Inc. is based in the USA, data is transferred to a third country. GitHub is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission pursuant to Art. 45 GDPR). The website is delivered encrypted via HTTPS.

For more information on privacy at GitHub, see https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

4. Cookies and web analytics

This website sets no cookies and uses no advertising services. It does not load third-party content such as fonts, maps or videos.

For web analytics we use Plausible Analytics, a service of Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible works without cookies and without persistent identifiers. It records the page visited, the referring source, the country of origin, the device type, the browser and the operating system, as well as individual events on the page: a click on a booking link, reaching a section of the page and opening a question in the FAQ. Your IP address is not stored. Together with the browser identifier and the domain, it is only briefly combined into a hash whose random salt is deleted and regenerated every 24 hours. This makes it impossible to recognize you beyond the day or across websites, and no profiles are created. The data is processed exclusively on servers in Germany and does not leave the European Union.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a data-minimizing statistical analysis to improve the content of this website). As no information is stored on or read from your device, consent under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is not required.

For more information on data processing at Plausible, see https://plausible.io/data-policy

5. Contacting us

If you contact us by email or phone, we process the data you provide, in particular your name, email address or phone number and the content of your message, to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry aims at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).

We delete the data once your inquiry has been fully handled, unless statutory retention obligations apply. We retain business correspondence in line with German commercial and tax law (§ 257 HGB, § 147 AO). Processing takes place via the services listed in section 7.

6. Meeting booking (Zeeg)

To arrange meetings, we link to the booking service Zeeg, operated by Zeeg GmbH, Friedrichstraße 114a, 10117 Berlin, Germany. When you click the link, you leave our website. On the booking page you enter your name, email address and preferred time, and optionally your phone number and your topic. Zeeg also processes technical access data such as your IP address.

The purpose is to arrange, confirm and hold the meeting. The legal basis is Art. 6(1)(b) GDPR where the meeting serves to initiate or perform a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in simple scheduling).

Zeeg processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR and stores it on servers in Germany. Some of Zeeg's sub-processors are located in the USA. Transfers there go only to providers certified under the EU-U.S. Data Privacy Framework or take place on the basis of standard contractual clauses (Art. 46 GDPR). Booked meetings are transferred to our calendar, and for online meetings you receive an access link. Information on the services used for this can be found in section 7.

We delete the booking data in Zeeg no later than six months after the meeting, unless retention obligations apply. Alternatively, you can arrange meetings with us by email or phone. For more information, see Zeeg's privacy policy at https://zeeg.me/de/legal/privacy

7. Email, calendar and video calls

For email, calendar and online meetings we use Google Workspace (Gmail, Google Calendar and Google Meet) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission pursuant to Art. 45 GDPR).

The legal basis for this is Art. 6(1)(b) GDPR where the communication serves to initiate or perform a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in secure and efficient communication). In online meetings via Google Meet, we process your contact details as well as the audio and video data transmitted during the call and connection data. We neither record calls nor transcribe them automatically. Retention periods follow sections 5 and 6.

For more information on privacy at Google, see https://policies.google.com/privacy

8. Your rights

You have the following rights regarding your personal data:

To exercise your rights, please contact:

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for Pommeranzen GmbH is the Hamburg Commissioner for Data Protection and Freedom of Information:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
https://www.datenschutz-hamburg.de

9. Changes to this privacy policy

This privacy policy is current as of August 2026. Further development of our website or changes in legal or regulatory requirements may make it necessary to update it. The version published on this page applies.