Privacy policy

Last updated: 2026-10-12

This policy explains which personal data is processed when you visit this website, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

Controller

Keenan Back
Musterstraße 67
Hamburg, Germany
Email: hey.emotionalproducer@gmail.com

Hosting and server logs

This website is hosted by Netlify, Inc. (USA). When you open a page, your browser sends technical data that is stored in server logs: IP address, date and time, page requested, referrer and browser type. This is needed to deliver the website and keep it secure (Art. 6 (1) (f) GDPR). Data may be processed in the USA on the basis of the EU–US Data Privacy Framework or the EU standard contractual clauses. See Netlify's privacy policy.

Cookies, analytics and fonts

This website sets no cookies and uses no analytics or tracking tools. Fonts are served from this website itself; no connection to Google Fonts or other font services is made.

Contact form

When you send the contact form, we process the details you enter (name, email address, role, service, your message and any files you attach) to answer your request (Art. 6 (1) (b) GDPR, or Art. 6 (1) (f) GDPR for general enquiries). Before sending, you confirm that you have read this policy.

Messages are delivered to us by email through the email service Resend (USA). See Resend's privacy policy.

A copy of your message is kept in a private, access-restricted repository on GitHub (GitHub, Inc., USA), so we can keep track of requests. Only we have access to it.

Attached files are uploaded to a private Cloudflare R2 storage bucket (Cloudflare, Inc., USA) and are only reachable through links that we control. Files from forms that were never sent are deleted after one day; files from sent messages are deleted automatically after 12 months.

We delete your message and attachments once your request is fully dealt with, unless statutory retention periods (for example for business correspondence) require us to keep them longer.

Spam protection (Cloudflare Turnstile)

To protect the contact form from spam, we use Cloudflare Turnstile (Cloudflare, Inc., USA). Turnstile checks technical data from your browser, such as your IP address and browser characteristics, to tell people from bots. It sets no tracking cookies. Legal basis is our legitimate interest in a form free of abuse (Art. 6 (1) (f) GDPR). See Cloudflare's Turnstile privacy addendum.

News by email

If you tick the optional news checkbox, we send you an email with a confirmation link. Only after you click it do we add your email address to our mailing list (double opt-in), stored with Resend (see above) together with the time of your sign-up and confirmation. Legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time through the link in every email or by writing to us; your address is then removed from the list.

Links to other websites

This website links to other services, such as Instagram. No data is sent to them until you follow a link; after that, their own privacy policies apply.

Your rights

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data deleted (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • receive your data in a portable format (Art. 20 GDPR)
  • object to processing based on legitimate interest (Art. 21 GDPR)
  • withdraw consent at any time, with effect for the future (Art. 7 (3) GDPR)

To use these rights, write to hey.emotionalproducer@gmail.com. You can also complain to a data protection supervisory authority, in particular in the EU member state where you live or work (Art. 77 GDPR).