Privacy Policy
This privacy policy explains what personal data I collect, how I use it, and what rights you have. Minimal data, one purpose: so you can receive my content and reach me directly.
1. Data controller
Alejandro del Carpio · Hamburg, Deutschland · hello@alejandrodelcarpio.com
Full address: see Imprint.
2. What data I process
- Newsletter / lead magnet: Email address, optional first name, language, source (which form). Stored with Brevo (Sendinblue SAS, France).
- Server logs: IP address, user agent, requested URL. Stored with Vercel (US) for security and performance — deleted after 30 days.
- Analytics: Plausible Analytics (EU-hosted, cookieless, no IP storage). Aggregated pageviews and referrers, no personal identification.
3. Legal basis
Newsletter and lead magnet: Art. 6(1)(a) GDPR (consent). Server logs and analytics: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning service).
4. Cookies
This site sets no marketing or tracking cookies. There's one strictly necessary cookie for the admin session (httpOnly, secure).
5. Your rights
You have the right to access, rectify, delete, restrict processing, data portability, and object. Newsletter consent can be revoked at any time by clicking the unsubscribe link in any email or by replying to me.
Requests to: hello@alejandrodelcarpio.com — response within 30 days.
6. Third-party processors
- Vercel Inc. (Hosting, USA) — Standard Contractual Clauses.
- Sendinblue SAS / Brevo (Email delivery, France) — DSGVO-konform.
- HostGator / Newfold (Domain & email hosting, USA) — Standard Contractual Clauses.
- Plausible Analytics BV (Web analytics, Netherlands) — cookieless, no PII.
Updated: May 21, 2026 · Placeholder, review with counsel before go-live