Privacy policy
Last updated: July 2026
1. Controller
The controller for the processing of personal data on this website is: TwoForMedia LLC 3N GOULD STE R Sheridan, Wyoming 82801 United States of America Represented by: Nils Weichler, Manager Email: hello@devbld.com DEVBLD. is a product of TwoForMedia LLC.
2. General information
Personal data means information relating to an identified or identifiable natural person. This may include IP addresses, contact details, the content of communications and information about the use of a website. We process personal data only where this is necessary to provide our website, to communicate with you, to arrange appointments, to ensure security or to analyse use of the website statistically. We do not sell personal data.
3. Hosting by Vercel
This website is hosted with: Vercel Inc. 440 N Barranca Avenue #4133 Covina, CA 91723 United States of America When you access our website, Vercel processes technically necessary connection and log data. This may include: - IP address - date and time of access - page or file requested - HTTP method and HTTP status code - browser type and version - operating system and device type - user agent - referrer information - approximate location derived from the IP address - technical error, security and diagnostic data This processing is necessary to deliver the website, ensure its stability and security, detect technical faults and defend against attacks or abuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests lie in providing our website securely, reliably and without technical faults, and in protecting our systems. We use a paid Vercel Pro plan. The data processing agreement between us and Vercel - the Vercel Data Processing Addendum - forms part of the contractual relationship. Where Vercel acts as a processor, it processes personal data on our instructions and within the scope of that agreement. Vercel states that its primary processing facilities are located in the United States and that data may also be transferred to sub-processors in further countries. Server and log data are processed only for as long as necessary for the provision and security of the website, fault analysis and the prevention of abuse. The actual availability of log data also depends on the Vercel products we use and their retention settings. We do not operate an additional external log drain and do not maintain our own database of website log data.
4. Vercel Web Analytics
We use Vercel Web Analytics, an analytics service provided by Vercel Inc. (address see section 4). Vercel Web Analytics is activated automatically when you access our website. The service is used to analyse the reach and use of our website statistically, to identify technical and editorial improvements and to develop what we offer in line with actual demand. According to Vercel, the following data points in particular may be processed: - time of a page view or event - page path and dynamic path requested - referrer - filtered URL and query parameters - approximate geographic location - operating system and operating system version - browser and browser version - device type - version of the analytics script According to Vercel, Vercel Web Analytics does not use third-party cookies. No persistent user identifiers are stored in your browser. Visitors are temporarily distinguished by a hash value derived from the incoming request. According to Vercel, this value is discarded after 24 hours. Vercel states that the data collected is not used to identify individual visitors permanently, to build cross-site profiles or to track browser sessions across different websites. Results are generally made available to us in aggregated form. Data-minimising configuration We have additionally restricted the service technically: before an event is transmitted, we remove all query parameters and URL fragments, so that only the bare page path is sent. Event properties are limited to a fixed list of permitted placement values; any value not on that list is replaced with “unknown”. No free text, email addresses, names or identifiers are passed on. Events we record In addition to page views, we record the following events: calendly_click - records that a link to our Calendly booking page was clicked. The only additional information transmitted is the position of the link on the website as a predefined placement value. No email address, user ID or booking data is transmitted as an event property. email_click - records that an email link was clicked. The only additional information transmitted is the position of the link on the website as a predefined placement value. The email address itself is not transmitted as an event property. booking_completed - triggered when the confirmation page /danke is opened. No additional event properties are transmitted. The event merely indicates that the confirmation page was viewed. Legal basis The processing is based on Art. 6(1)(f) GDPR. Our legitimate interests lie in measuring the reach and use of what we offer in a data-minimising way, in assessing the effectiveness of our contact and booking options, and in improving our website technically and editorially. In balancing those interests we take into account in particular that: - no advertising or marketing profiles are created - no persistent user identifiers are used - no third-party cookies are used - no accounts or login data are linked to the analytics data - no email addresses or other contact details are transmitted as event properties - event properties are limited to predefined, non-personal values - query parameters and URL fragments are removed before transmission - according to Vercel, the temporary visitor hash is discarded after 24 hours - the evaluations are generally made available to us in aggregated form only We retain the statistical evaluations available via Vercel Web Analytics only for as long as necessary to analyse and improve what we offer. Objection You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data for these purposes. You can use the button at the end of this page or contact us at hello@devbld.com. Further information on processing by Vercel can be found in Vercel's privacy notice.
5. Language preference (NEXT_LOCALE cookie)
We use the NEXT_LOCALE cookie to store the language version of the website you have selected. - Content: language identifier, for example de or en - Purpose: displaying the selected language on subsequent visits - Storage period: one year - Third-party access: no Storage is necessary in order to provide the language version you selected on a lasting basis. The legal basis is § 25(2) no. 2 TDDDG. Where the information is to be regarded as personal data in an individual case, the processing is additionally based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website in a user-friendly and linguistically consistent manner. You can delete the cookie at any time via your browser settings.
6. dvb-intro entry in session storage
The website stores the entry dvb-intro with the value 1 in your browser's sessionStorage. Its sole purpose is to record that the intro animation has already been shown during the current browser session. The entry is not transmitted to us or to any third party. It is deleted when the relevant browser or tab session ends. The legal basis is § 25(2) no. 2 TDDDG. Where there is any personal reference at all, the processing is additionally based on Art. 6(1)(f) GDPR. Our legitimate interest lies in avoiding repeated intro animations that would impair use of the site within the same session.
7. Language selection based on the browser
On your first visit, the Accept-Language header transmitted by your browser may be evaluated in order to select a suitable language version. We do not create a user profile from this and do not store the value separately in our application. General processing of the request by the hosting provider remains unaffected. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website in a language the visitor is likely to understand.
8. Booking appointments via Calendly
Our website contains an external link to the appointment booking platform Calendly. The provider is: Calendly, LLC 115 E Main St., Ste A1B Buford, GA 30518 United States of America Calendly is not integrated into our website as an iframe or embedded script. Merely displaying the link does not establish any connection to Calendly. Only when you click the Calendly link do you leave our website and your browser establishes a direct connection to Calendly. In doing so, your IP address, browser and device information, the time, the previously visited page, referrer information, URL and UTM parameters and your approximate location may be transmitted to Calendly. If you book an appointment, the following data in particular may be processed, depending on the configuration: - first and last name - email address - phone number, where requested - company and job function, where requested - time zone - selected appointment - messages or answers you enter - technical log and usage data Calendly states that, when appointments are booked, it processes customer data such as names, email addresses, phone numbers and further details on behalf of its customers. For certain website, account, usage and security data, Calendly may additionally be a controller in its own right. Booking data is used to prepare and hold the appointment and to communicate with you. The legal basis is Art. 6(1)(b) GDPR where the booking serves to initiate or perform a contract with you. If you act as an employee, contact person or representative of a company and are not yourself a party to the contract, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in organising and holding business appointments efficiently. The data required to organise the appointment may also be transferred to the calendar and email service connected to Calendly: [Add the connected calendar provider, for example Google Workspace or Microsoft 365] Booking data is deleted once it is no longer necessary for organising the appointment and the subsequent business communication, and where no statutory retention obligations or legitimate interests in retention - in particular for asserting or defending against claims - conflict with deletion. According to its current declaration, Calendly is certified under the EU-U.S. Data Privacy Framework and additionally uses standard contractual clauses for international transfers.
9. Contacting us by email
Our website does not offer a contact form. When you click an email link, this merely opens the email program installed on your device. No email content is transmitted to us at that point. Unless you have disabled Vercel Web Analytics, the click is transmitted to Vercel as an email_click event together with the generic position of the link (see section 5). The email address itself is not transmitted as an event property. If you then send us an email, we process in particular: - your email address - your name, where provided - the content and subject of your message - any attachments - technical email and header information - any further details you provide voluntarily The processing serves to handle your enquiry and to communicate with you. The legal basis is Art. 6(1)(b) GDPR where your message serves to initiate or perform a contract. In other cases the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business enquiries and maintaining traceable business communication. We use the following service provider for email: [Add the email provider, including its location and any third-country transfer] Correspondence is deleted once the enquiry has been dealt with conclusively and no statutory retention obligations or legitimate interests in further storage exist.
10. Local features and fonts
Copying an email address The feature for copying an email address uses only your device's local clipboard. The copied content is not transmitted to us or to any third party by this feature. The clipboard is accessed only once you actively press the relevant button. Fonts The fonts used on the website are delivered together with the website from our own, i.e. Vercel's, infrastructure. No connection to Google Fonts is established when the website is accessed. next/font is used solely to build and locally serve the font files.
11. Features and services not used
As at the date of this privacy policy, we do not use the following on devbld.com: - no contact form - no publicly accessible API of our own for collecting contact details - no embedded Calendly iframes - no externally loaded Google Fonts - no externally loaded images - no Google Tag Manager and no Google Analytics - no embedded chat widgets - no Sentry - no user database - no social media plugins This describes the technical state as at the date of this privacy policy. If the website changes, this policy will be updated accordingly.
12. Processing in the USA and international transfers
TwoForMedia LLC is established in the United States. Data may therefore be processed in the United States. There is no general adequacy decision for the United States that automatically applies to all US companies. The European Commission's adequacy decision on the EU-U.S. Data Privacy Framework applies only to US companies that effectively participate in that framework. Vercel and Calendly currently declare that they are certified under the EU-U.S. Data Privacy Framework. Where its requirements are met and the respective processing is covered by the certification, transfers to these providers are based on Art. 45 GDPR. In addition, the respective data processing agreements contain standard contractual clauses pursuant to Art. 46(2)(c) GDPR. Where processing takes place in the United States, it cannot be entirely ruled out that US authorities may demand access to data on the basis of statutory powers. We select service providers taking into account the nature of the data, the scope of processing and the contractual and technical safeguards available.
13. General storage periods
Unless a more specific period is stated in this privacy policy, we store personal data only for as long as necessary for the respective purpose. When determining the storage period we take into account in particular: - the purpose of the processing - the duration of a business relationship - statutory retention obligations - limitation periods - the need to assert, exercise or defend legal claims - security and abuse risks Once the purpose ceases to apply, the data is deleted or anonymised, unless there is an obligation or entitlement to retain it further.
14. Your data protection rights
Where the statutory requirements are met, you have in particular the following rights: - right of access to your personal data being processed - right to rectification of inaccurate or incomplete data - right to erasure - right to restriction of processing - right to data portability - right to withdraw consent given, with effect for the future - right to object to certain processing Requests can be addressed to hello@devbld.com or to the EU representative named in section 2.
15. Specific note on the right to object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. For Vercel Web Analytics you can exercise your objection directly via the button at the end of this page.
16. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. You may in particular contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.
17. Obligation to provide data
For a purely informational visit to the website you do not need to actively provide us with any data. Technical connection data is, however, necessary in order for the website to be transmitted to your device. Providing contact details when sending an email or booking an appointment is voluntary. Without the details necessary for communication or scheduling, we may not be able to handle your enquiry or hold an appointment.
18. Automated decision-making
We do not use decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
19. Data security
We use appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and unauthorised disclosure. The website is transmitted in encrypted form via HTTPS/TLS.
20. Changes to this privacy policy
We may amend this privacy policy if the website, the service providers used, the processing activities or the legal requirements change. The version published on devbld.com at the relevant time applies.
Disable Vercel Web Analytics
Using the button below, you can object at any time, with effect for the future, to the processing of your data by Vercel Web Analytics. No page views and no events will be transmitted from that point on. If you disable Vercel Web Analytics, we store the entry va-disable in your browser's local storage. The entry contains only the information that no analytics data should be transmitted. It is used to respect your objection on subsequent visits and is not transmitted to us or to any third party. The legal basis for storing this entry is § 25(2) no. 2 TDDDG, as it is necessary in order to give effect to your objection. The entry is tied to the browser you are using: if you clear local storage or use a different browser or device, you will need to declare your objection again there.