Privacy policy.

This is an informal English translation. The legally binding version is the German Datenschutzerklärung.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Jens Hartmann
Burnitzstr. 47
60596 Frankfurt am Main, Germany
E-mail: hello@overlander.blog

2. What data is processed and why

2.1 Server log files

When you access this website, the hosting provider automatically collects information that your browser transmits: shortened IP address, date and time of request, time zone offset, requested URL, HTTP status, data volume transmitted, referring website, browser, operating system, language and version.

This data is processed exclusively for the technical provision of the website, to ensure system security, and for error analysis. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, stable operation). No combination of this data with other sources occurs. Logs are automatically deleted within a maximum of 14 days.

2.2 Web analytics via Plausible

We use Plausible Analytics for statistical analysis of website usage. Plausible uses no cookies and collects no personal data. Individual users are not recognised; IP addresses are used solely for hit counting and are not stored. No tracking across devices or websites takes place.

What is collected is aggregated information only — pages visited, approximate geographic origin (country), browser, and source of visit (referrer). Technical details: plausible.io/data-policy.

Plausible is operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia — within the EU. No third-country transfer occurs. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in privacy-respecting analytics). Since Plausible operates cookie-free and without collecting personal data, no consent under § 25 TTDSG is required.

2.3 Image and content delivery via Sanity

The editorial content and images on this website are delivered via the content management system Sanity (Sanity Inc., 132 Crandon Blvd, Key Biscayne, FL 33149, USA). When you load a page, images are fetched from Sanity's CDN (cdn.sanity.io). Your device's IP address is transmitted to Sanity in this process.

Sanity is certified under the EU-US Data Privacy Framework. A Data Processing Agreement (DPA) under Art. 28 GDPR exists with Sanity. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in performant hosting of editorial image content). More: sanity.io/legal/privacy.

2.4 Hosting via Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel operates a global content delivery network. When the site is accessed, technically necessary connection data (see section 2.1) is transmitted to Vercel.

Vercel is certified under the EU-US Data Privacy Framework. A DPA under Art. 28 GDPR exists with Vercel. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable, performant hosting). More: vercel.com/legal/privacy-policy.

2.5 Typefaces

This site uses the typefaces Cormorant Garamond and Inter, published under the SIL Open Font License and served from our own servers (via the Vercel CDN). No connection to Google Fonts or other third-party font services takes place.

3. Cookies

This website uses no cookies. There are no cookie banners because no consent-requiring storage operations take place.

4. Contact

When you contact us by e-mail, the information you provide (e-mail address, content of the message) is used exclusively to handle your inquiry. Legal basis: Art. 6 (1) (f) GDPR. Data is deleted once its storage is no longer necessary, or processing is restricted if statutory retention obligations apply.

5. Your rights

You have the right, at any time, to:

• Access (Art. 15 GDPR) — what data is held about you
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Object (Art. 21 GDPR) — to processing on legitimate-interest grounds
• Data portability (Art. 20 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

For requests regarding these rights, please contact hello@overlander.blog.

6. Currency of this notice

This privacy policy is updated when data processing practices change. The current version is available at overlander.blog/en/privacy.

Last updated: 18 May 2026

Note: when additional third-party services are added (newsletter, embedded videos, external fonts, tracking pixels, etc.), this notice must be updated and the date above bumped accordingly.