Privacy Policy
This privacy policy explains what personal data I collect, how I use it, and what rights you have. Minimal data, one purpose: so you can receive my content and reach me directly.
1. Data controller
Alejandro del Carpio · Hamburg, Deutschland · hello@alejandrodelcarpio.com
Full address: see Imprint.
2. What data I process
- Newsletter / lead magnet: Email address, optional first name, language, source (which form). Stored with Brevo (Sendinblue SAS, France).
- Server logs: IP address, user agent, requested URL. Stored with Vercel (US) for security and performance — deleted after 30 days.
- Analytics: First-party, cookieless analytics. Aggregated pageviews and on-site interactions; unique visitors are estimated with a daily one-way hash, with no IP address or personal data stored.
3. Legal basis
Newsletter and lead magnet: Art. 6(1)(a) GDPR (consent). Server logs and analytics: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning service).
4. Cookies
This site sets no marketing or tracking cookies. There's one strictly necessary cookie for the admin session (httpOnly, secure).
5. Your rights
You have the right to access, rectify, delete, restrict processing, data portability, and object. Newsletter consent can be revoked at any time by clicking the unsubscribe link in any email or by replying to me.
Requests to: hello@alejandrodelcarpio.com — response within 30 days.
6. Third-party processors
- Vercel Inc. (Hosting, USA) — Standard Contractual Clauses.
- Sendinblue SAS / Brevo (Email delivery, France) — DSGVO-konform.
- HostGator / Newfold (Domain & email hosting, USA) — Standard Contractual Clauses.
- Upstash Inc. (KV/Redis storage, US/EU) — stores aggregated, non-personal analytics and admin data. Standard Contractual Clauses.
Last updated: June 9, 2026