Privacy Policy — this website

Last updated: November 2026

1. The short version

• This site sets no cookies, which is why you see no cookie banner.
• There is no contact form, no sign-up and no embedded services — no videos, maps or social buttons.
• The fonts are served from our own server. Loading a page creates no connection to Google Fonts.
• For visitor statistics we use Plausible, which works without cookies and stores no personal data.
• Our host Vercel processes the technically necessary data needed to deliver the page (server log files).
• We do not sell personal information, and we never have.

2. Who is responsible

The controller for data processing on this website is:

Klotzbuecher & Klumpe GbR
Dechsendorfer Str. 14
91054 Erlangen, Germany
Phone: +49 9131 6120 555
Email: hallo@k2-solutions.io

Because we are based in Germany, this site is run under the EU General Data Protection Regulation (GDPR). If you are in the UK, the UK GDPR gives you the same rights, and you may complain to the Information Commissioner's Office. If you are in the US, see section 8.

3. Hosting with Vercel

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes the data technically needed to deliver it and stores it in server log files. In particular:

• your IP address,
• the date and time of the request,
• the page requested and the page you came from (referrer),
• your browser and operating system (user agent).

We do not analyse these log files and we do not combine them with anything else. At most we use them to spot errors or attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is in delivering this site securely and reliably. Vercel may process data in the USA; Vercel is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies (Art. 45 GDPR). We have a data processing agreement with Vercel (Art. 28 GDPR).

More in Vercel's privacy policy:vercel.com/legal/privacy-policy

4. Visitor statistics with Plausible

To understand how many people visit and where they come from, we use Plausible Analytics, provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. According to the provider, the data is stored exclusively within the EU.

Plausible records, without cookies and without any persistent identifier:

• which page was opened and which page you came from,
• tags in links (for example utm_source=instagram), so we can see which channel works,
• browser, operating system, device type and the country or region (derived from the IP address),
• whether someone clicked a store button or opened the store page (including which store and which tag).

Plausible does not store your IP address. It goes into an encrypted checksum together with your browser and a random value that changes daily, so that one visit is not counted twice. That checksum is deleted after 24 hours. We cannot trace any of it back to you as a person. Plausible sets no cookies and stores nothing on your device.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is in improving this site and our advertising without intruding on your privacy. We have a data processing agreement with Plausible (Art. 28 GDPR). Because no information is stored on or read from your device, no consent is required under § 25 TDDDG or under the UK PECR.

More: plausible.io/data-policy

5. Links to the app stores

You will find links to Google Play and the App Store on this site. These are plain links: nothing from those services is loaded into our pages, and no data goes to them unless you click. Once you follow a link, that provider's privacy terms apply.

Our store page (elf-diaries.com/get-the-app) reads your browser's own description of itself to work out whether you are on Android or on an iPhone, and sends you to the matching store. We pass the tag from the link (for example “instagram/bio”) on to the store, so that we can later see which channel leads to downloads. No personal data is passed on.

6. Contacting us by email or phone

If you contact us by email or phone, we store your enquiry together with the details you give us, in order to answer it. We do not pass those details on without your consent.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or to steps taken before entering into one, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). We keep the data until you ask us to delete it or the purpose no longer applies. Statutory retention periods are unaffected.

7. How long we keep things

Unless stated otherwise above, personal data stays with us only as long as the purpose requires. If you ask for deletion or withdraw consent, we delete the data unless a statutory retention period (for example under tax or commercial law) stands in the way.

8. Your rights

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR),
• have it corrected (Art. 16) or erased (Art. 17),
• restrict processing (Art. 18),
• data portability (Art. 20),
• withdraw consent with effect for the future (Art. 7(3)).

Just write to hallo@k2-solutions.io.

Right to object (Art. 21 GDPR)

Where we process data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

If you are in California

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we do not use personal information for cross-context behavioural advertising. There is nothing to opt out of. California residents may still ask us what we hold about them, and we answer those requests at the address above.

Complaints

You may complain to a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany,lda.bayern.de. In the UK you may complain to the Information Commissioner's Office, ico.org.uk.

9. Encryption

For security this site uses TLS encryption. You can see it in the “https://” and the padlock in your browser's address bar.

10. Changes

We update this policy when the site or the law changes. The version published here is the one that applies.