Privacy

Last updated: 2026-05-26.

1. Controller

Valentin Herrera
Gustav-Poensgen-Str. 49, 40215 Düsseldorf, Germany
E-Mail: valentin@paus.works
Once PAUS UG (haftungsbeschränkt) is incorporated, it will act as the data controller.

2. Data we process

• Newsletter sign-ups — email address only. Used solely to send the newsletter you subscribed to.
• Event RSVPs — name + email + event reference. Used for attendance lists; deleted 90 days post-event.
• Inquiry mail (`hello@`, `valentin@`) — when you contact us by email, the message lives in our standard mail account. No automated processing.

3. Legal basis (Art. 6 GDPR)

• Art. 6(1)(a) — explicit consent (newsletter)
• Art. 6(1)(b) — contract performance (event RSVPs)
• Art. 6(1)(f) — legitimate interest (basic web infrastructure)

4. Third-party processors

• Supabase (database hosting, EU Frankfurt) — Art. 28 GDPR processor agreement in place
• Vercel (web hosting, EU + CDN) — Art. 28 GDPR
• Resend (transactional email, USA) — Art. 28 + EU-US Data Privacy Framework + SCCs
• Vercel Analytics (web traffic metrics, US, owned by Vercel Inc.) — Art. 28 GDPR + EU-US Data Privacy Framework + SCCs. No tracking cookies, aggregate visit counts only, no personal identifiers stored, no cross-site tracking.

5. Cookies

We use only technically necessary cookies (authentication, CSRF protection, session). No tracking cookies. No marketing cookies.

6. Your rights

You may request access, rectification, erasure, restriction, data portability, or object to processing. Email valentin@paus.works — we reply within 30 days.

You may also lodge a complaint with the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

7. Retention

Newsletter sign-ups: until you unsubscribe (link in every email). Event RSVPs: 90 days post-event. Analytics: aggregate, anonymised, indefinite.