This notice explains how personal data is processed when you visit freyta.eu or submit an enquiry through the contact form.
Version date: 21 September 2026
1. Controller and contact
Martin Gardemann, sole trader
Schönstraße 42A, 81543 Munich, Germany
Email: info@freyta.eu
Telephone: +49 1567 9588787
2. No web analytics or non-essential cookies
We do not use web analytics, advertising or social-media pixels, fingerprinting, non-essential cookies, or comparable visitor identifiers. In particular, we do not use Vercel Web Analytics. No cookie-consent banner is therefore required for this website. Campaign parameters in a link (ref, utm_source, utm_medium, utm_campaign, utm_content and utm_term) are neither stored on page view nor used for audience measurement; where present, they are transmitted only with a submitted enquiry.
3. Hosting and essential technical logs
The site and form function are provided by Vercel Inc., USA. Essential connection and security data may be processed on access, such as IP address, date and time, requested URL, HTTP status, browser/operating-system details and, where sent by the browser, the Referrer header. This is necessary to deliver, troubleshoot and protect the site under Art. 6(1)(f) GDPR.
The intended commercial production setup is Vercel Pro without Observability Plus or log drains. Runtime logs available to Freyta are retained for no more than one day. Moving to Pro and executing Vercel's DPA are mandatory release conditions.
4. Contact form / process check
Name, company and business email are required. Role, selected workflow, message and the campaign parameters listed above are optional. The form cannot be submitted without the required fields. We do not maintain a separate CRM or lead database: the enquiry is delivered through Vercel and Resend to the Freyta mailbox and retained there to handle it.
Where you personally take steps towards a potential contract, the legal basis is Art. 6(1)(b) GDPR. For an employee or representative contacting us for their company, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is handling business enquiries and contacting the represented company.
5. Recipients, processors and international transfers
- Vercel Inc. processes data for hosting and function execution. US processing may occur and relies on current EU-US Data Privacy Framework (DPF) participation or, alternatively, the applicable EU Standard Contractual Clauses (SCCs).
- Plus Five Five, Inc. (Resend) processes form email for delivery. US processing may occur and relies on current DPF participation or, alternatively, SCCs.
- Zoho Corporation GmbH is the expected contracting entity for the Freyta mailbox for this German account. The mailbox is operated in the EU region (
mail.zoho.eu). Support access from India may occur under SCCs and a documented transfer impact assessment. The contracting entity, DPA and transfer documentation will be confirmed and archived before production use.
We verify and record the DPF status of Vercel and Resend before production release. Please request information about the applicable safeguards at info@freyta.eu.
6. Retention
- Vercel runtime logs: no more than one day in the intended Pro setup, without Observability Plus or log drains.
- Resend message content and delivery logs: up to 30 days on the active plan.
- Unsuccessful or inactive enquiries, including campaign attribution: 12 months after the last contact; deletion is reviewed monthly unless an exception is documented.
- Enquiries converted into business correspondence: six years where required by commercial law.
- Invoices and accounting records: eight years where legally required.
7. Your rights
Subject to the statutory requirements, you have rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time for the future. You may also complain to a supervisory authority, in particular the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
You may object to processing under Art. 6(1)(f) GDPR for reasons arising from your particular situation. Contact info@freyta.eu.
8. No automated decision-making
The enquiry form does not make decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.