Privacy Policy

Last updated: July 2026

1. Controller

Dr. Bastian Brand
Email: legal@bastian-brand.com. See also the Impressum.

2. Data we collect

Morning Lens is a public, read-only site. The only personal data we process is what you give us when you subscribe to the newsletter:

• Email address — the address you enter to subscribe, used solely to send you the newsletter you signed up for.
• Consent record — when you confirm your subscription (double opt-in), we store the confirmation timestamp and IP address as proof of consent (Art. 7 GDPR).
• Technical data — our hosting provider processes IP addresses and browser information as part of serving the website.

We collect no assessment data and no payment data, and we use no tracking pixels or advertising cookies.

3. Purpose & legal basis

• Sending the newsletter you subscribed to
• Keeping a record of your consent (accountability)

Legal basis: Art. 6(1)(a) GDPR — your consent, given via double opt-in. You can withdraw it at any time.

4. Third-party services

• Resend Inc. (USA) — email delivery and contact/unsubscribe management. Processes your email address and subscription status solely to send the newsletter on our behalf. Transfer to the USA under standard contractual clauses / the EU-U.S. Data Privacy Framework.
• Hostinger — hosting infrastructure. The website, the subscription service and the consent database run on our own server at this provider; the consent record is stored there, separately from the site's anonymous product data.

5. Your rights

Under GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), objection (Art. 21) and data portability (Art. 20), and to withdraw your consent at any time. To exercise any of these, contact legal@bastian-brand.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

6. Unsubscribe & retention

You can unsubscribe at any time via the one-click link in every email or your mail client's native "unsubscribe" button. We keep your email address until you unsubscribe; the consent/withdrawal record is then retained for accountability (Art. 5(2), Art. 7 GDPR) for up to three years and deleted afterwards. We never sell or share your address for advertising.

7. Cookies

Morning Lens sets no tracking or advertising cookies and uses no analytics on the public site. The subscription form works without cookies.