Privacy policy

1. Controller

Alexander Karl, a11l, Gartenstraße 102, 10115 Berlin, Germany. Email a@a11l.io, phone +49 (0) 157 5312 5112.

2. What this site does and does not do

a11l.io is a static website. It sets no cookies, runs no analytics, no tracking pixels and no advertising scripts. Fonts are served from this domain, not from Google. The only data processed when you visit is what any web server needs to deliver a page (section 3), and what you choose to send me (section 5).

The light/dark theme switch stores your choice in your browser's local storage under the key a11l-theme. This value never leaves your browser and is not a cookie in the sense of the ePrivacy rules; it only remembers a display preference you set yourself.

3. Hosting and server logs

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes the data your browser sends: IP address, date and time, requested URL, referrer, browser and operating system. Vercel uses this to deliver the site and to keep it secure (legal basis: Art. 6 (1) f GDPR, my legitimate interest in operating a working, secure website). Vercel's edge network delivers the site from servers close to you, including servers in the EU; data may nevertheless be processed in the USA. Vercel is certified under the EU-US Data Privacy Framework and I have a data processing agreement with Vercel including the EU standard contractual clauses. Vercel keeps request logs for a short period only. See vercel.com/legal/privacy-policy.

4. Booking a call (Calendly)

Links to "Book 30 minutes" open Calendly, a scheduling service of Calendly LLC, 115 E Main St, Buford, GA 30518, USA. Calendly only processes data once you open its page and enter your name, email and the slot you want. Calendly is the controller for its own site; I receive the booking details to hold the call (legal basis: Art. 6 (1) b GDPR, steps prior to a contract). Calendly participates in the EU-US Data Privacy Framework. See calendly.com/privacy.

5. Email, phone and WhatsApp contact

If you write to a@a11l.io, call, or message me on WhatsApp, I process the data you send in order to answer and, where it comes to that, to prepare and run an engagement (Art. 6 (1) b GDPR). Email is hosted at one.com (One.com Group AB, Sweden, EU). WhatsApp is a service of WhatsApp Ireland Ltd; if you choose to use it, Meta's terms and privacy policy apply to the transport. I keep correspondence for as long as needed for the business relationship and for as long as commercial and tax law require me to (up to ten years for business records).

6. External links

This site links to LinkedIn, Calendly and client websites. Opening those links takes you to sites with their own privacy policies. No data is sent to them just by viewing this site.

7. Your rights

You have the right to access the personal data I hold about you, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise any of these rights, email a@a11l.io. You also have the right to complain to a supervisory authority; the one responsible for me is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

8. Changes

I will update this policy when the site changes, for example if analytics or a contact form are added. The date at the top shows the current version.