Privacy Policy

1. Overview and controller

We take the protection of your personal data seriously. This policy explains what data we process when you visit warmhollow.com, on what legal basis, and what rights you have.

The controller responsible for data processing on this website is:

[First name Last name] [Street and house number] [Postal code and city] Germany Email: [your email address]

(Contact details as stated in our Legal Notice.)

2. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

access the personal data we hold about you (Art. 15 GDPR),
request correction of inaccurate data (Art. 16 GDPR),
request erasure of your data (Art. 17 GDPR),
request restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR), and
object to processing based on legitimate interests (Art. 21 GDPR).

To exercise any of these rights, contact us at the email address above. You also have the right to lodge a complaint with a data protection supervisory authority (see section 9).

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the site, Vercel automatically processes technical data required to deliver the website to your browser (see "Server log files" below). Vercel acts as our processor under a data processing agreement. As Vercel is based in the USA, data may be transferred outside the EU (see section 8).

Legal basis: Art. 6 (1)(f) GDPR (our legitimate interest in a reliable, secure website).

4. Content management

The content of this website (text and images) is managed in Sanity, a content management system provided by Sanity.io. Content is retrieved and delivered through our hosting infrastructure. Sanity does not receive personal data about ordinary visitors beyond what is technically necessary to serve content.

5. Server log files

Each time the website is accessed, our hosting provider automatically collects and stores information that your browser transmits, including:

the IP address of the requesting device,
date and time of the request,
the page or file requested,
the referrer URL,
and your browser type and operating system.

This data is not merged with other data sources and is used solely to ensure the secure and stable operation of the website. Legal basis: Art. 6 (1)(f) GDPR.

6. Cookies

This website does not currently set cookies that require consent, and it does not use analytics, advertising, or tracking technologies. Only technically necessary processing takes place. Should this change in the future (for example if we introduce web analytics or a newsletter), this policy will be updated and, where legally required, consent will be obtained before any such technology is used.

7. Amazon affiliate program

warmhollow.com participates in the Amazon Associates Program. This means some links on our pages are affiliate links. If you click such a link and make a purchase on Amazon, we may receive a commission at no additional cost to you.

The affiliate links on our own pages do not set cookies on your device. However, once you click through to Amazon, Amazon may process your data and set cookies on its own websites in order to attribute the purchase. This processing is governed by Amazon's own privacy policy, which you can find at: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496

Legal basis for the use of affiliate links: Art. 6 (1)(f) GDPR (our legitimate interest in financing this website).

8. Data transfers outside the EU

Some of our service providers (such as Vercel and Amazon) are based in the USA. Where personal data is transferred to such providers, the transfer is safeguarded by appropriate measures such as the EU Standard Contractual Clauses and/or the provider's certification under the EU–US Data Privacy Framework.

9. Right to lodge a complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence or workplace. For our location, the competent authority is the data protection authority of Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz, ULD).

10. SSL/TLS encryption

This site uses SSL/TLS encryption for security. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

11. Changes to this policy

We may update this privacy policy to reflect changes to our website or to legal requirements. The current version always applies.

Last updated: 09.06.2026