1. Controller
David Krisch
Konradstr. 28 B, 44536 Lünen (Brambauer), Deutschland
hello@matterandreach.com
2. Hosting and server logs
The website is hosted by Vercel Inc.. When a page is requested, Vercel may—depending on the particular request and the hosting logging actually enabled—process connection and request data such as IP address, date and time, requested host and path, HTTP method and status, referrer, browser/user agent, and technical error or security data. The website creates no custom behavioral or profiling events in Runtime Logs. The legal basis is GDPR Art. 6(1)(f); our legitimate interest is secure, stable and abuse-resistant operation.
On the current Pro plan, Vercel makes Runtime Logs available in the dashboard for one day by default; Observability Plus would extend that access window to 30 days. The reporting window is not a promise that technical data in every processing context has already been erased outside that window; Vercel's contractual deletion and retention rules apply.
3. Local storage of your privacy choice
While optional measurement is disabled on the server, the settings dialog creates no local-storage record and collects no consent in advance. Only after documented activation and your subsequent choice may one first-party local-storage record be created to remember and honor that choice. The record is sent neither to a database nor to a third party. Language is part of the /de or /en URL, so no language cookie is set.
| Name / type | Purpose and content | Duration |
|---|---|---|
publisher_privacy_choice:v2First-party Local Storage | Not currently written as a new record. After activation: separate choices for Web Analytics and Speed Insights, activation eligibility, policy version and decision timestamp. No marketing identifier and no database transfer. | After a choice: until the next choice or browser-data deletion |
| Vercel Web Analytics Optional event data · disabled | Not currently loaded. Only after its own consent and documented approval. Vercel describes page-use data as anonymous and aggregated; we send no custom events, query parameters or URL fragments. | After activation: Pro reporting window 12 months; Vercel notes possible longer storage for later plan upgrades. |
| Vercel Speed Insights Optional performance data · disabled | Not currently loaded. Only after its own consent and documented approval. Vercel describes the data points as anonymous and not associated with an individual visitor or IP address; query parameters and URL fragments are removed. | After activation: Pro reporting window 30 days |
4. Separate consent and withdrawal
Web Analytics and Speed Insights are separately selectable optional measurement services. While they are not documented as active, no initial consent prompt is shown and no preference is collected in advance for future processing. We ask explicitly before activation. Refusal has no disadvantage. Processing is then based on GDPR Art. 6(1)(a) and § 25(1) TDDDG. A material change to policy 2026-08-25.2 invalidates an earlier grant and asks again.
Both optional measurement services are currently disabled. “Privacy settings” shows the current status but accepts neither consent nor an advance preference.
5. Vercel Web Analytics
The service is currently disabled. After approval and consent, its purpose would be analysis of page use that Vercel describes as anonymous and aggregated. Timestamp, redacted path or dynamic route, referrer, coarse location, operating system, browser, device type and SDK version may then be processed. Query parameters and URL fragments are removed before transmission; we send no custom events or additional usage properties.
According to Vercel documentation, Web Analytics uses no third-party cookies. Vercel describes a hash identifier created from the incoming request and says the visitor-session lifespan is discarded after 24 hours. This product-specific description does not change the fact that Vercel may process the connection data listed in section 2 for an ordinary hosting request.
6. Vercel Speed Insights
The service is currently disabled. After approval and consent, its purpose would be real-user website performance measurement. Redacted path or route, network speed, browser, device, operating system, country, Core Web Vitals with technical attribution, SDK version and received time may then be processed. Vercel describes these data points as anonymous and neither intended for reconstructing sessions nor associated with individual visitors or IP addresses. We report the provider description and do not infer a broader legal guarantee of anonymity from it.
7. Existing aggregate data
Vercel describes the data provided through its measurement products as anonymous or aggregated. To the extent a data point in the provider dashboard cannot in fact be associated with a person or browser identifier, we cannot individually address it or claim individual erasure either. Withdrawal prevents further transmission by the deselected service in this browser.
8. Recipient and international transfer
Vercel Inc. is the recipient and processor for hosting; this applies to Web Analytics and Speed Insights only after their separate activation. Vercel identifies the United States as its primary processing location in its DPA and may also process data where Vercel or its then-listed subprocessors operate. For necessary transfers from the EEA, the DPA provides in particular for the European Commission’s 2021 Standard Contractual Clauses. Vercel also states in its Privacy Notice that it is certified under the EU-U.S. Data Privacy Framework. Which mechanism applies depends on the processing, data category, recipient and applicable conditions; the current subprocessors can be checked through the linked list.
Vercel DPA · Vercel Subprocessors · Vercel Privacy Notice · Web Analytics Privacy · Speed Insights Privacy
9. Contact by email
Privacy inquiries can be sent to hello@matterandreach.com The email service is provided by Checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Deutschland.
We process the sender address, any name provided, subject and message content, attachments sent voluntarily, and technical email metadata required for delivery and abuse prevention. The purpose is to classify, handle and answer the inquiry and to enable necessary follow-up communication or the establishment, exercise or defence of legal claims. Information not needed for the particular purpose should not be sent.
The legal basis is GDPR Art. 6(1)(b) where the communication concerns entering into or performing a contract. For general, editorial, legal or privacy-related communication, the legal basis is GDPR Art. 6(1)(f); our legitimate interest is the appropriate handling and documentation of incoming communication and, where relevant, the establishment, exercise or defence of legal claims. Where a statutory retention duty applies, continued storage relies on GDPR Art. 6(1)(c). Retention depends on the purpose, necessary follow-up, limitation periods and applicable statutory retention duties.
10. External platforms
Social profiles are ordinary external links. This website does not load social feeds, players or marketing pixels in the background.
11. Data-subject rights and complaint
Depending on the circumstances, data subjects may request access, rectification, erasure, restriction or portability, object to processing and withdraw consent. Complaints may be submitted to the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen or another competent supervisory authority.
12. Status and changes
This privacy notice reflects the technical configuration with policy version 2026-08-25.2. Optional measurement loads only after documented activation and your respective consent. If material changes are made, we will update this page and request any required consent again.