Privacy

Controller

The controller responsible for data processing on this website is:

Jonas Lüder (sole proprietorship), Feldstraße 12, 25355 Barmstedt, Germany. Email: business@jonaslueder.de.

In short

This website sets no cookies, measures no visitors and embeds no third-party services in the page. Fonts are served from our own server.

We process personal data only if you join the waiting list.

Visiting the site (server logs)

When you open the page, our host processes technically necessary connection data: IP address, time, requested address, volume of data transferred, browser type and operating system — for as long as it takes to run the site and fend off attacks.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in operating the site securely.

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA; the waiting-list form is transmitted via Vercel as well. Data may be transferred to the USA. Vercel is certified under the EU-US Data Privacy Framework; transfers are additionally covered by standard contractual clauses under Art. 46 GDPR.

Waiting list

If you join the waiting list, we process your email address in order to send you news about Hyperathlete — about the reveal on 1 October 2026 and what follows. Providing it is voluntary; without it we simply cannot put you on the list.

We use the double opt-in procedure: after submitting, you receive an email with a confirmation link. Only once you click it are you on the list. If you do not click, we do not write to you.

Until you confirm, we store your address and IP address on the basis of our legitimate interest in a sign-up procedure that resists abuse (Art. 6(1)(f) GDPR); we also use the IP address to slow down mass sign-ups. Unconfirmed entries are deleted once the confirmation link has expired.

To prove your consent, we store the wording you agreed to, the times of sign-up and confirmation, and the IP addresses used (Art. 7(1) GDPR). After you confirm, we receive an internal notification containing your address.

The legal basis for sending you news is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — by replying to one of our emails or informally to business@jonaslueder.de. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Retention: we store your address until you withdraw. Beyond that, we keep the proof of your consent for as long as we may need it to defend against claims (statutory limitation period; Art. 6(1)(f) GDPR).

Recipients of your data

Waiting-list entries are stored in a Supabase database in the Frankfurt am Main data centre. The provider is Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Access from third countries is covered by standard contractual clauses under Art. 46 GDPR.

Emails are sent by our email provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Processing takes place in Germany.

Data processing agreements under Art. 28 GDPR are in place with Supabase, Strato and Vercel. Beyond this we do not pass on your data.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). An informal email to business@jonaslueder.de is enough.

You may also lodge a complaint with a data protection supervisory authority.