Privacy policy
In short: this website collects as little as possible. It sets no cookies, follows no one across other websites and has no contact form. Fonts and images come from this website itself, not from Google or other services. It embeds no content from other providers.
Who is responsible
Nathan Lauer. Email: hello@nathanlauer.com
When you open a page
To show you a page, the server needs a few technical details from your browser: your IP address, the time, the page you asked for, the page you came from, and your browser and operating system. The website is hosted by Cloudflare, which uses these details only to deliver the pages and protect them against attacks, and keeps them only as long as that requires.
Cloudflare works on my behalf under a data processing agreement (Art. 28 GDPR). It is a US company; transfers to the USA are covered by the EU-U.S. Data Privacy Framework, which the European Commission recognises as adequate (Art. 45 GDPR). Legal basis: my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
Visitor statistics
I count visits with Fathom Analytics. Fathom sets no cookies, builds no profiles and does not store your IP address. I only see totals: how many people visited, which pages they read, which websites and countries they came from, and how often someone clicked or copied the email address, reached the contact section, switched the language or clicked a client's logo.
Visits from the EU are first processed on servers in the EU. Fathom, a Canadian company, works on my behalf under a data processing agreement; Canada has an adequacy decision from the European Commission (Art. 45 GDPR). Legal basis: my legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR).
If you write to me, I use your email address and message only to reply. My mailbox is hosted by Zoho in data centres in the EU, under a data processing agreement. I delete emails once they are no longer needed, unless the law requires me to keep them, for example business correspondence. Legal basis: Art. 6(1)(b) GDPR if you write about a possible commission, otherwise my legitimate interest in answering (Art. 6(1)(f) GDPR).
Links to other websites
A link to another website contacts that website only when you click it. Its own privacy policy applies there.
Your rights
You can ask me at any time which data I hold about you, and have it corrected, deleted or restricted, or receive it in a portable format (Art. 15 to 20 GDPR). You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Art. 77 GDPR).
Right to object. Where I process data on the basis of my legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). An email to the address above is enough.
Last updated: October 2026