Privacy
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Sven Finger
Spitzbergenweg 20b
22145 Hamburg
Germany
hi@svenfinger.co
2. General Information on Data Processing
I process personal data of visitors to this website only to the extent necessary to provide a functional website and my content. Personal data is processed regularly only with your consent or where processing is permitted by law.
3. Hosting and Content Delivery
This website is hosted by Framer B.V., Stadhouderskade 55, 1072 AB Amsterdam, Netherlands ("Framer"). When you visit this website, Framer processes technical data on my behalf as a processor under Art. 28 GDPR.
Content delivery and security is provided via Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA ("Cloudflare"). Cloudflare acts as a Content Delivery Network (CDN) and processes requests to this website in order to deliver content efficiently and to protect against attacks. For this purpose, Cloudflare may set a strictly necessary cookie (__cf_bm) for bot management, which expires after 30 minutes.
The legal basis for this processing is Art. 6 (1) (f) GDPR, my legitimate interest in a secure, stable, and efficient presentation of this website.
As Cloudflare is based in the USA, personal data (in particular your IP address) may be transferred there. Cloudflare is certified under the EU–U.S. Data Privacy Framework. The transfer is therefore based on an adequacy decision of the European Commission pursuant to Art. 45 GDPR.
Further information: Framer privacy policy, Cloudflare privacy policy
4. Server Log Files
When you visit this website, my hosting provider automatically collects information that your browser transmits, including:
IP address (typically shortened/anonymised by the provider)
Date and time of the request
Requested URL and HTTP status code
Referrer URL
Browser type, version, and operating system
Amount of data transferred
This data is processed for the purpose of delivering the website, ensuring security, and analyzing technical errors. The legal basis is Art. 6 (1) (f) GDPR. The data is not merged with other data sources and is stored only for as long as necessary for these purposes.
5. Framer Analytics
I use the analytics tool built into Framer to understand how this website is used (e.g. number of visits, page views, referrers, approximate country). Framer Analytics is cookieless, does not use persistent identifiers, and does not collect or store personal data that could identify individual visitors. Statistics are aggregated and anonymous.
The legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in understanding the use of my website in order to improve it.
Further information: Framer GDPR & Cookies
6. Contact by Email
If you contact me by email (e.g. via a mailto: link on this website), the data you transmit (your email address, name if provided, and the content of your message) will be processed for the purpose of handling your inquiry. The legal basis is Art. 6 (1) (b) GDPR (where the inquiry relates to a contract or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).
I store this data for as long as necessary to respond to your inquiry and to comply with any statutory retention obligations.
7. Blog
This website contains a blog with editorial content. Visiting blog pages does not involve any data processing beyond the server log files described in section 4. Comments are not enabled.
8. Your Rights
You have the following rights regarding your personal data:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on legitimate interests (Art. 21 GDPR)
Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)
To exercise these rights, please contact me using the details above.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work, or place of the alleged infringement. The supervisory authority responsible for me is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit Ludwig-Erhard-Straße 22, 7. OG 20459 Hamburg (Website)
10. Data Security
This website uses TLS encryption (HTTPS) to protect the transmission of data between your browser and the server.
11. Changes to this Privacy Policy
I may update this privacy policy from time to time to reflect changes in the services I use or in legal requirements. The current version is always available on this page.
Last updated: 17.05.2026