Privacy Policy

This is a portfolio site. It has no accounts, no forms, no newsletter, no comments and no analytics, and it sets no cookies. Nothing you do here is recorded by us beyond the ordinary server log described below, and there is nothing here for you to sign up to.

Derrick Tawah, trading as Leanstart Africa
Bessemerstraße 51, 12103 Berlin, Germany
Email: leanstart.spam-trap.africa.remove-this@gmail.invalid.com

A sole proprietorship. No data protection officer is appointed, and none is required: the thresholds in Article 37 GDPR and section 38 BDSG are not met.

The site is served by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States, acting as our processor under Article 28 GDPR. Like any web server, theirs records each request: the IP address it came from, the time, the page asked for, the referring page if there is one, and the browser's user agent string.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is operating the site and keeping it available and secure; an unlogged server cannot be defended against abuse or diagnosed when it breaks. These logs are not used to build any profile, are not combined with anything else, and are not sold or shared.

Because Vercel is a United States company, this involves a transfer outside the European Economic Area. It is covered by the data processing agreement concluded with Vercel and the standard contractual clauses it incorporates, under Article 46 GDPR.

The page currently loads the Inter typeface from Google's font service (fonts.googleapis.com and fonts.gstatic.com), operated by Google LLC in the United States. Your browser contacts Google to fetch it, and in doing so discloses your IP address to Google. The legal basis is Article 6(1)(f) GDPR, the legitimate interest being consistent presentation of the site.

We are aware this is avoidable and intend to serve the font from this site instead, which removes the request to Google entirely. This paragraph will be removed when that is done.

This site sets no cookies, uses no local storage, and runs no analytics, tag manager, advertising pixel or tracking script of any kind. There is no consent banner because there is nothing to consent to.

The footer links to social media profiles and to our other products. These are ordinary links: nothing from those services is embedded in this page and nothing loads from them until you choose to follow a link. Once you do, the site you land on is governed by its own privacy policy, not this one.

Hali, Blotmarked and Ukoo Yangu each hold different data and each publish their own policy. This one covers leanstart.africa and nothing else.

We keep nothing ourselves. Server logs are held by Vercel under their own retention schedule and are not exported, copied or archived by us. If you write to the address above, that message is kept for as long as it takes to answer you and to meet any retention period the law imposes on business correspondence.

Under the GDPR you have the right to ask what personal data is held about you (Article 15), to have it corrected (16) or erased (17), to restrict its processing (18), to receive it in a portable form (20), and to object to processing based on legitimate interests (21). Write to the address above to exercise any of them.

In practice, since this site holds no account and no record that identifies you, there is rarely anything to find. We will say so honestly rather than invent a file to show you.

You may complain to a supervisory authority, under Article 77 GDPR. The competent one for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, because that is where the controller is established. You may also complain to the authority where you live or work.

This policy describes the site as it is, not as it is planned to be. It changes when the site changes, and the date below says when it was last checked against the code.