Privacy & Data Notice

Data Controller

• Name: Jason Rae (trading as jasonrae.ai)
• Location: Stuttgart, Germany (EU)
• Contact: jason@jasonrae.ai

As data controller under EU General Data Protection Regulation (GDPR) 2016/679, Jason Rae determines the purposes and means of processing the personal data described below.

What I Collect

• Contact form: first/last name, work email, company, project details, optional budget + newsletter consent.
• Newsletter form: first name (optional) and work email.
• Metadata added automatically: page URL, timestamp, and whether you opted into updates.

How It Is Used

• Contact inquiries are routed through Formspree to my email so I can reply personally.
• Newsletter opt-ins are stored in a private Notion database and tagged in my CRM for monthly sends.
• I never sell or rent your information. Data is only shared with processors required to deliver the service (Formspree & email provider).

Legal Basis for Processing (GDPR Art. 6)

• Consent (Art. 6(1)(a)) — Newsletter subscriptions; your email is only added to the list when you actively opt in.
• Legitimate Interests (Art. 6(1)(f)) — Contact form replies; I have a legitimate interest in responding to business inquiries you have initiated, and responding is necessary to fulfil that purpose.
• Strictly Necessary (functional) — A submission timestamp is stored in your browser's localStorage to prevent duplicate form submissions within a short window. No personal data is stored in localStorage.

Retention & Deletion

• Consulting inquiries are reviewed within 48 hours and retained for up to 12 months to maintain project history.
• Newsletter subscribers stay on the list until you unsubscribe; removal happens immediately when requested.
• You can request deletion or export anytime by emailing jason@jasonrae.ai.

Your Rights

• Access: ask what data I have about you.
• Correction: update inaccurate information.
• Deletion: request complete removal from my systems.
• Unsubscribe: every newsletter includes a one-click unsubscribe link.
• Lodge a complaint: you have the right to contact the supervisory authority for Baden-Württemberg — Landesbeauftragter für Datenschutz und Informationsfreiheit (LfDI BW).

Security & Anti-Spam

• Forms use honeypot fields and rate limiting to block automated submissions.
• Transport is encrypted end-to-end via HTTPS when data travels to Formspree.
• I keep devices patched and protected with MFA on all connected services.

Third-Party Services

• Formspree (formspree.io) — Contact and newsletter form data is transmitted to Formspree's servers (US). Formspree acts as a data processor under a GDPR-compliant Data Processing Agreement (standard contractual clauses). Data transmitted includes your IP address, browser user-agent, and form field contents. See Formspree's Privacy Policy.
• Cloudflare CDN (cdnjs.cloudflare.com) — Font Awesome icons are loaded from Cloudflare's public CDN. Your browser sends your IP address to Cloudflare's servers as part of this HTTP request; Cloudflare may retain it as server-side infrastructure logging. See Cloudflare's Privacy Policy.
• Calendly (calendly.com) — Calendly is not part of the current public booking flow. If a direct booking link is added later, Calendly would process your name, email, and timezone independently under its own privacy policy. See Calendly's Privacy Policy.
• Google Fonts — This site loads Inter and JetBrains Mono from Google Fonts. When these font files are requested, your browser connects to Google servers and transmits technical data such as your IP address and browser details. This site does not use Google Analytics, Google Tag Manager, or Google advertising services. No analytics, advertising, or tracking cookies are set by this website.

Have Questions?

Email jason@jasonrae.ai with "Privacy" in the subject line and I'll respond within two business days.