Privacy Policy

1. Controller

Waldo Vanderhaeghen
Libauer Str. 15
10245 Berlin, Germany
Email: waldo@vanderlore.de

2. What data we collect and why

2.1 Server logs

When you visit this site, your browser automatically sends technical data (IP address, URL, timestamp, browser type). These are temporarily stored in server logs by our hosting provider Vercel Inc. (340 Pine Street, Suite 800, San Francisco, CA 94104, USA). Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a secure and stable service. Logs are deleted after at most 30 days.

2.2 Sign-up forms

When you sign up for a tool or template, we collect your name, email address, and – if provided – your city and additional information about your rental properties. This data is used to send you the requested tool or template and to follow up on your specific situation if needed.

Data is processed by email only (no backend database) and retained only as long as necessary to handle your request. Legal basis: contract performance or pre-contractual measures (Art. 6(1)(b) GDPR).

Email delivery is handled by Google LLC (Gmail SMTP, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) under a data processing agreement. Google is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy.

2.3 Analytics — PostHog

This site uses PostHog (PostHog Inc., 965 Mission St, Suite 650, San Francisco, CA 94103, USA) for usage analytics. PostHog is only activated after your consent (§ 25(1) TTDSG). Data is processed exclusively via our EU server instance (eu.i.posthog.com) and does not leave the EU. Legal basis upon consent: Art. 6(1)(a) GDPR.

You can withdraw your consent at any time by clicking "Decline" in the cookie banner or deleting the hm_cookie_consent entry from your browser's Local Storage.

2.4 Language preference (cookie)

We set a technically necessary cookie preferred-lang (duration: 1 year) that stores your preferred language. This cookie contains no personal data and is exempt from consent requirements under § 25(2)(2) TTDSG.

3. Processors and recipients

All providers are engaged under data processing agreements (Art. 28 GDPR) or standard contractual clauses. No data is shared with any other third parties.

4. Your rights

Under GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise these rights, contact waldo@vanderlore.de.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

5. No automated decision-making

We do not carry out automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR.

6. Updates

Last updated: July 2026. We reserve the right to update this policy as needed.