Privacy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:


Pommer Design
Moritz Bastian Pommer
Taunusanlage 8
60329 Frankfurt am Main
Germany


Email: contact@pommerdesign.com


We have not appointed a data protection officer, as the requirements of Art. 37 GDPR in conjunction with § 38 BDSG are not met.


2. General

We process personal data only where this is necessary to provide a working website and our content and services. We do so either with your consent or where a legal basis permits it.


3. Hosting

This website is hosted by:


Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
Netherlands


Framer processes the data from your visit on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Framer uses its own infrastructure providers, including Amazon Web Services. Where personal data is transferred to third countries, this is based on the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.


Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable provision of this website.


4. Server log files

When you access this website, our hosting provider automatically records information transmitted by your browser. This typically includes the file requested and the volume of data transferred, the date and time of access, browser type and version, operating system, referrer URL, and IP address in shortened or full form.


This data is not combined with other sources. It is processed under Art. 6 (1) (f) GDPR for the technical operation and security of the website, and deleted once it is no longer required for that purpose.


5. Contact

If you contact us through the contact form or by email, we process the information you provide, in particular your name, email address and message, to handle your inquiry.


Legal basis: Art. 6 (1) (b) GDPR where your inquiry relates to entering into a contract, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to inquiries.


We delete this data once your inquiry has been fully handled, unless statutory retention periods apply. Inquiries that lead to a contractual relationship are subject to commercial and tax retention periods of six and ten years respectively.


6. Cookies and statistics

This website sets no cookies and uses no third-party tracking tools.


Our hosting provider Framer (see section 3) records anonymous usage statistics for this website: pages viewed, referring website, country, device type and browser. Framer uses no cookies and no persistent identifiers for this. To count daily unique visitors, it combines the IP address and browser information into a hash with a secret that is deleted every day, so individual visitors cannot be identified. Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is understanding how the website is used and improving it.


7. Fonts

Fonts are served from this website's own server. Your browser does not connect to third-party servers for them, and in particular not to Google Fonts.


8. Recipients

We pass your data to third parties only where this is necessary to meet our contractual or statutory obligations, where you have consented, or where we are legally required to do so. We choose processors carefully and bind them by contract under Art. 28 GDPR.


9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing (Art. 21), and withdrawal of consent (Art. 7 (3)). To exercise any of these rights, a simple email to the address above is enough.


You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:


Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany


10. Right to object

Where we process personal data on the basis of legitimate interests under Art. 6 (1) (f) GDPR, you have the right to object at any time on grounds relating to your particular situation.


11. Data security

This website is delivered over a TLS-encrypted connection. You can see this in your browser's address bar.


12. Changes to this policy

We may update this policy to keep it in line with current law or to reflect changes to our services.


Last updated: September 27, 2026