1. Who is responsible
Clara Funke, sole proprietorship (Einzelunternehmen) trading as "paloto", Weinbergsweg 24, 10119 Berlin, Germany. Email: cf@clara-funke.de.
2. Visiting this website
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technical data such as your IP address, the date and time of access, the pages requested, the referrer and your browser type, in server logs. This is necessary to deliver the website securely and reliably (Art. 6(1)(f) GDPR, our legitimate interest in a functional and secure website). Logs are deleted after a short period according to Vercel's settings.
We use no advertising tools and no cross-site tracking. Fonts are hosted on our own server; no data is sent to font providers. Our homepage videos are hosted on our own server; no data is sent to video platforms.
3. Analytics, only if you agree
We would like to understand which pages are read and which buttons are pressed, so we can make this site better. For that we use PostHog, provided by PostHog Inc., on its European infrastructure (PostHog Cloud EU, hosted in Frankfurt, Germany). PostHog then processes a pseudonymous identifier, the pages you open, your approximate region derived from your IP address, and your browser and device type.
None of this happens until you agree. When you first arrive we ask, and nothing is loaded, requested or stored until you choose: decline and no analytics code runs at all. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG for the storage on your device). You can withdraw it at any time, with effect for the future, using the cookie settings link in the footer — withdrawing stops the collection and clears what was stored on your device.
We have switched off the features we do not need: there is no session recording, so we never see your screen; there is no automatic capture of every click; and no profile is built for an anonymous visitor. If you agree, PostHog stores a cookie and a small amount of data in your browser to recognise a returning visit; if you decline, it stores nothing.
4. Contact and pilot requests
When you use our form or email us, we process the data you provide (name, work email, company, role, industry and your message) to answer your request and, where applicable, to discuss a collaboration (Art. 6(1)(b) GDPR for pre-contractual steps; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering inquiries). Form submissions are delivered to us by email via Resend (Resend, Inc.), on its European infrastructure in Ireland, so the contents of your enquiry stay within the EEA. Our emails are hosted by Google Workspace (Google Ireland Ltd., Ireland). We delete your data once it is no longer needed for your request, unless statutory retention obligations apply (e.g. for business correspondence).
5. Service providers and transfers outside the EU
We use the providers named above as processors under data processing agreements. PostHog and Resend are both used on their EU infrastructure, so analytics data and the contents of your enquiry stay within the EEA. Some other providers are based in the USA or may access data from there. Transfers are based on the EU-U.S. Data Privacy Framework, where the provider is certified, or on EU Standard Contractual Clauses (Art. 44 ff. GDPR).
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we rely on legitimate interests, you may object at any time (Art. 21). Contact us at cf@clara-funke.de.
You also have the right to lodge a complaint with a supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.
7. Changes
We update this policy when our website or services change. The current version is always available on this page.