Legal
Privacy policy
How this website handles personal data under the GDPR. Version 1.2 — 2026-08-17.
Auf Deutsch lesen (verbindliche Fassung)
This is a courtesy translation. The German version is the authoritative one.
The short version. This site sets no cookies, runs no analytics, embeds nothing from third parties and loads no external fonts. The only personal data processed is what your browser necessarily sends to the server that delivers the page, plus whatever you choose to put in an email to us.
Controller
DK2 Ventures UG (haftungsbeschränkt)Uhlbacher Str. 34
70329 Stuttgart
Germany
Represented by Daniel Hartmann. Email: mail@dk2.eu · Phone: +49 711 25294236
We have not appointed a data protection officer; we are not required to under Art. 37 GDPR or § 38 BDSG.
Hosting and server log data
This website is a set of static files delivered through GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, and GitHub B.V., Vijzelstraat 68–72, 1017 HL Amsterdam, Netherlands.
When you open a page, your browser transmits data that GitHub processes in server log files in order to deliver it, in particular:
- your IP address,
- the date and time of the request,
- the page or file requested and the amount of data transferred,
- the HTTP status and referring URL,
- your browser and operating system as reported by the user agent string.
This processing is technically unavoidable — a server cannot answer a request without knowing where to send the answer. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in delivering a functioning, secure website. We do not merge this data with other sources, and we have no access to the raw logs ourselves.
Retention: GitHub determines how long these server logs are kept. We have no access to them and do not evaluate them. GitHub’s practices are described in the GitHub Privacy Statement.
Processing on our behalf: Hosting is provided under a processor relationship pursuant to Art. 28 GDPR, governed by the GitHub Data Protection Agreement.
Transfer to a third country: Processing in the United States cannot be ruled out. Where the recipient is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). Otherwise it relies on Standard Contractual Clauses under Art. 46 (2) (c) GDPR, which form part of the agreement referenced above. The current certification status can be checked at dataprivacyframework.gov; a copy of the safeguards is available on request via the contact details above.
Cookies, analytics and tracking
None. This site stores nothing on your device — no cookies, no local storage, no fingerprinting. There is no access to information in your terminal equipment within the meaning of § 25 TDDDG, so there is nothing to consent to and no cookie banner to dismiss. We use no analytics or reach-measurement service of any kind, so we cannot tell you how many people read this sentence.
External content
No fonts, scripts, stylesheets, images, maps, videos or embeds are loaded from third-party servers. Everything the page needs is served from this domain, using typefaces already present on your device.
The site does link out — to GitHub, npm, our documentation sites and reynt.co, among others. Following a link hands you over to that operator, whose own privacy policy then applies. We have no influence over what happens there.
Contacting us
There is no contact form. If you email or call us, we process the contact details and the content of your message in order to answer it. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or its initiation, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in responding to enquiries addressed to us.
You are neither legally nor contractually required to provide your data (Art. 13 (2) (e) GDPR) — without it, however, we cannot answer your enquiry.
Email provider: our mailbox is operated by Fastmail Pty Ltd, Melbourne, Australia, and the data is stored on servers in the United States. Fastmail processes the content and traffic data of your message as a processor under Art. 28 GDPR. There is no adequacy decision for Australia, and we do not rely on the EU-U.S. Data Privacy Framework here — the transfer rests on Standard Contractual Clauses under Art. 46 (2) (c) GDPR. A copy of the safeguards is available on request via the contact details above.
We keep correspondence for as long as it is needed to deal with the matter, and beyond that only where statutory retention periods under commercial and tax law require it (generally six or ten years under § 257 HGB and § 147 AO). Email is transported over TLS between the servers involved but is not end-to-end encrypted; please bear that in mind before sending anything sensitive.
Recipients
Personal data from this website reaches only:
- GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA) as our hosting provider — see above;
- Fastmail Pty Ltd (Melbourne, Australia) as the operator of our mailbox — see above.
Beyond that we disclose nothing. There is no advertising network and no data broker behind any of this.
Automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have data erased (Art. 17) or its processing restricted (Art. 18),
- receive your data in a portable format (Art. 20),
- object at any time to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21), and
- withdraw any consent you have given, with effect for the future (Art. 7 (3)).
To exercise any of these, write to mail@dk2.eu.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority competent for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
Changes to this policy
We update this policy when the site changes in a way that affects it. The version and date at the top always reflect the current text.
Related: Imprint · Datenschutzerklärung (verbindlich)