Privacy Policy
1. Controller
Dirk Lach
44309 Dortmund, Germany
Email: mail@dirklach.com
2. Overview
This website uses no analytics or marketing tools, no advertising and no tracking cookies. Personal data is only processed where needed to run the website, send the newsletter and handle submissions. All connections are encrypted via TLS.
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes technical data sent by your browser (server log files): IP address, date and time of access, requested page, referrer URL, browser and operating system. This data is required to deliver the website and keep it secure.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). A data processing agreement is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision or the EU Standard Contractual Clauses.
4. Cookies
The website only sets technically necessary cookies that store your display preferences:
wl-dark-mode: light or dark modewl-hide-credits: show or hide pick infowl-font-columns: number of columns in the font overview
These cookies contain no personal data, are not shared with third parties and are deleted when you close your browser. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
5. Fonts
The typeface used on this website is served from this website's own server. No connection is made to Google Fonts or any other external font provider.
6. Content and images (Sanity)
The content of this website is managed with the content management system Sanity by Sanity Inc. (USA). Images are loaded directly from Sanity's content delivery network (cdn.sanity.io), which transmits your IP address and your browser's technical data to Sanity.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in fast and reliable delivery of content). Transfers to third countries are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
7. Newsletter (beehiiv)
If you subscribe to the Weekly Likes newsletter, your email address is sent to and stored by the newsletter service beehiiv Inc. (USA), together with the time of sign-up and confirmation. Sign-up uses a double opt-in: you receive an email asking you to confirm your subscription. beehiiv may record statistically whether a newsletter was opened and which links in it were clicked.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the unsubscribe link in every newsletter or by emailing me. Your data is removed from the mailing list once you unsubscribe. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.
8. Submissions and payment
When you submit work via the Submit form, I process the following data: the link to the work, the names and websites of its authors, your name, your email address, the time of submission and its review and payment status. This data is stored in Sanity (see section 6) and used to review your submission and to contact you.
The review fee is paid via Lemon Squeezy (Lemon Squeezy, LLC, USA). Lemon Squeezy acts as merchant of record, meaning it is the seller towards you and handles payment, invoicing and taxes under its own responsibility. For this, I pass your name, your email address and an internal submission ID to Lemon Squeezy. You enter your payment details directly with Lemon Squeezy; I never receive them. Lemon Squeezy only sends me a confirmation of payment and an order ID. Lemon Squeezy's own privacy policy also applies.
The legal basis is Art. 6(1)(b) GDPR (contract or pre-contractual steps) and Art. 6(1)(c) GDPR where statutory retention obligations apply. The data is deleted once it is no longer needed for the review and a possible publication, unless statutory retention obligations apply.
9. Contact by email
If you email me, I process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed.
10. External links
This website links to third-party websites. No data is sent to them until you click a link; from then on, the respective provider's privacy policy applies.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). A short email to mail@dirklach.com is enough.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: October 2026