Less
data.
This website sets no cookies and builds no profile of you. We count page views anonymously and without recognizing visitors. What is collected nonetheless is described here.
Controller
The controller responsible for data processing on this website is:
WhalesDontFly H&F GmbH
Prenzlauer Allee 203
10405 Berlin, Germany
Phone: +49 173 2586624
Email: hello@whalesdontfly.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
No cookies, no tracking
This website stores no cookies and puts nothing in your browser's local storage. No advertising or marketing services are embedded. A consent banner is therefore not required — there is nothing to consent to.
The fonts we use are also hosted on our own server. Your browser does not connect to Google Fonts or any other third party when loading a page.
How we count page views
We want to know which texts are read. For this we use Plausible Analytics, operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. The service works without cookies, without local storage and without recognizing visitors across devices.
Collected are: the page visited, the referring page, device type, browser, operating system and the location that can be derived from your IP address — country, region, city. If the link you arrived through carries a campaign identifier (ref, utm_*), it is counted as well; the service discards all other parameters of the address. Data is evaluated only in aggregate.
We count two further events. First, clicking a link that leads to another website; the destination address is recorded. Second, submitting a form on this website — only the fact that a form was submitted is counted, not what you typed into it. Form contents are not transmitted to the service.
Your IP address and your browser identifier are not stored; they are processed only briefly to derive an anonymous daily value. The random value used for this is changed and deleted every 24 hours — the daily value therefore cannot be reversed or recognized the next day. This creates no personal reference, and no profile either.
Data is processed and stored on servers in Germany; the infrastructure belongs to European companies. No transfer to third countries takes place. A data processing agreement under Art. 28 GDPR exists with the provider; it is part of the service's terms of use and requires no separate signature.
The legal basis is our legitimate interest in privacy-friendly audience measurement under Art. 6(1)(f) GDPR. Because no information is stored on or read from your device, no consent under § 25 TDDDG is required either.
Newsletter sign-up
For the newsletter we need your email address. The sign-up form sends it directly to our email service provider Brevo GmbH, Köpenicker Straße 126, 10179 Berlin; it is neither stored nor processed on this website. Brevo processes your data solely on our behalf and within the European Union. A data processing agreement under Art. 28 GDPR exists with the provider.
Sign-up uses the double opt-in procedure: after submitting, you receive an email with a confirmation link. Only after you click it do we add you to the mailing list. As proof of consent we log your email address, the time of sign-up and of confirmation, and the IP address used.
The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time — via the unsubscribe link in every issue or with an informal message to hallo@denkmal.ai. After withdrawal we delete your address from the mailing list. Your address is not sold and not passed on to third parties who would use it for their own purposes.
External hosting
This website is hosted by an external provider. When a page is requested, the provider processes technically necessary access data, in particular IP address, date and time, requested address, amount of data transferred, and browser and operating system information. This data is required for delivery and for defense against attacks.
The legal basis is our legitimate interest in a secure and efficient provision of the service under Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR exists with the provider.
The access data is processed solely for these purposes and deleted automatically as soon as it is no longer required for them — after thirty days at the latest. It is not merged with other data and not evaluated for analytics; how we count page views is described further above.
The provider is based in the USA, so personal data is transferred to a third country. The transfer relies on the European Commission's standard contractual clauses under Art. 46(2)(c) GDPR in conjunction with the EU-US Data Privacy Framework, insofar as the provider is certified under it. Despite these instruments, access by US authorities cannot be ruled out entirely.
Getting in touch
This website has no contact form. The contact page links to email addresses with a prepared subject line; your message is written entirely in your own email program. No data is collected, stored or transmitted on this website in the process.
If you contact us by email or phone, we process your details to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned; otherwise our legitimate interest in answering under Art. 6(1)(f) GDPR or your consent under Art. 6(1)(a) GDPR.
Your inquiry stays with us until you ask for deletion, withdraw your consent or the purpose ceases to apply. Statutory retention periods remain unaffected.
Access, erasure, objection
You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data, as well as the right to rectification or erasure. You can also request restriction of processing and receive your data in a common format.
You can withdraw any consent you have given at any time with effect for the future. Where your data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you can object on grounds relating to your particular situation (Art. 21 GDPR).
An informal message to hello@whalesdontfly.com is enough for all of these requests.
Supervisory authority
In case of violations of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
Encryption and objection to advertising
This site uses TLS encryption. You can recognize an encrypted connection by the “https://” in the address bar and the lock symbol in your browser.
We hereby object to the use of the contact details published in the legal notice for sending advertising that has not been expressly requested.