Privacy policy
Last updated: 7 November 2026
1. Controller
Kadir Alik, Schleiermacher Str. 23, 10961 Berlin, Germany · info@spreeform.eu
2. What this website does, and what it does not
This website uses no cookies, no tracking, no analytics services and no embedded third-party content. Fonts are delivered from our own domain. Personal data is only processed where you actively contact us or where it is technically necessary to deliver the page.
3. Hosting and server logs
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes connection data (IP address, time, requested URL, browser and operating system, referrer) to deliver the page and to defend against attacks. Logs are kept for a short time and then deleted. Legal basis: Art. 6 (1) (f) GDPR (secure, reliable operation). Vercel is certified under the EU-US Data Privacy Framework and bound by a data processing agreement including EU standard contractual clauses; delivery is routed through Vercel's European edge locations where possible.
4. Contact form
If you use the contact form, we process the data you enter (name, business, email address, phone number if given, your message) to answer your request. The message is delivered to our mailbox via Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), which acts as our email processor under a data processing agreement with EU standard contractual clauses. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps) and your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future. We delete the data once the request has been dealt with, unless statutory retention periods apply. A hidden field in the form serves only to detect automated spam; no data is stored for that purpose.
5. Email, WhatsApp, Instagram
If you contact us by email, we process your details to handle your request (Art. 6 (1) (b) and (f) GDPR). If you contact us via WhatsApp, data is transmitted through WhatsApp Ireland Ltd. and Meta Platforms, Inc.; their privacy policy applies. We use WhatsApp only on a business basis and do not share your contact details with other parties. Links to Instagram simply open the Instagram website; no data is transmitted to Meta until you follow the link.
6. Your rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You may withdraw any consent at any time. You also have the right to lodge a complaint with a supervisory authority, for us the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.
7. Security
All pages are delivered via TLS (HTTPS). We apply technical and organisational measures to protect your data against loss, misuse and unauthorised access.