Privacy Policy

Last updated: October 2026 · Deutsche Version (maßgeblich)

1. Controller

Sascha Hoffmann (sole proprietor), Matternstraße 19, 10249 Berlin, Germany. Email: sascha@the-autopilot.com

2. Hosting (Vercel)

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data (e.g. IP address, date/time, requested URL, user agent, referrer) in server logs to deliver and secure the site. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). A data processing agreement is in place; US transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. Logs are kept only briefly.

3. No tracking cookies, no analytics

We use no cookies, no analytics or tracking tools and no ad pixels.

4. Newsletter (Resend)

If you subscribe, we process your email address, the time of signup and of confirmation. We use double opt-in: you receive an email with a confirmation link and are only added after clicking it. Unconfirmed signups are stored as "unsubscribed" and deleted regularly. Legal basis: your consent (Art. 6(1)(a) GDPR); logging the signup serves as proof (Art. 6(1)(c), (f) GDPR).

Emails are managed and sent via Resend (Plus Five Five, Inc., San Francisco, USA), with data processed in its EU region (Ireland). A data processing agreement is in place; for any US access, Standard Contractual Clauses and/or the EU-US Data Privacy Framework apply. We do not use open or click tracking.

You can unsubscribe anytime via the link in every email, which withdraws your consent. Your data is then deleted or kept only on a suppression list so you receive no further emails.

5. Affiliate links

Some links (e.g. to hosting providers) are affiliate links. When you click them you leave our site and the provider may set its own cookies to attribute the referral; the provider is responsible for that.

6. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and may withdraw consent at any time. You may also lodge a complaint with a supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.

7. Retention

We keep personal data only as long as needed for the purpose or required by law.