Legal information
Privacy policy
This page explains which data is processed when you visit golas.ch, what it is used for and what rights you have. Last updated: 1 October 2026.
Controller
Golasch GmbH, Grafenberger Allee 277-287, 40237 Düsseldorf, Germany.
The company is represented by its managing director, Benedikt Golasch. Where this page says ‘I’, I speak for the company as its managing director.
Send questions about data protection to hi@golas.ch.
In short
This website sets no cookies. It uses no analytics or tracking tools and embeds no third-party services.
It serves its font, logos and images itself. Your browser contacts no other servers for them.
Visiting the website
Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, hosts this website.
For every visit, Vercel processes data about your request. This mainly includes your IP address, the date and time, the page requested, the status code and the referring page.
It also includes details of your browser and operating system (user agent) and technical characteristics of the encrypted connection. Vercel also derives your city and country from your IP address.
I use Vercel to deliver the website and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is a secure and stable website.
Vercel also uses traffic and log data as an independent controller, for example to operate, secure and develop its services. Vercel’s privacy notice applies to that processing. You can send questions and objections about it directly to privacy@vercel.com.
Server logs are created from this data. I can view them for one day at most.
Vercel does not state a fixed retention period for its own storage. According to Vercel, it keeps data as long as it needs it. Vercel cites legal and contractual obligations, the development of its services, disputes and other legitimate business purposes.
Vercel then deletes or anonymises the data. Where deletion is not possible, for example in backups, Vercel stores the data securely.
Contacting me by email or phone
The ‘Let’s talk’ button and the linked email address open your email program. The website itself sends nothing.
If you write to me, I process your email address, your message and anything else you send, such as your name or attachments. I use this data to answer your enquiry.
If your enquiry concerns a possible project, the legal basis is Art. 6(1)(b) GDPR. For other enquiries it is Art. 6(1)(f) GDPR; my legitimate interest is to reply to you.
My email runs on Google Workspace. The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Google processes the emails on behalf of Golasch GmbH.
I delete your message once your enquiry is settled. If it leads to an engagement, I keep emails relating to it for six years. I keep invoices and other accounting records, including attachments, for eight years.
Each period starts at the end of the calendar year concerned. Records that still matter for a tax not yet assessed are kept longer. Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code require this. The legal basis is then Art. 6(1)(c) GDPR.
If you call me, I see your phone number if you transmit it. I use it and what you tell me during the call to deal with your request. The same legal bases and retention periods apply as for email.
Transfers to third countries
Vercel and Google may process data in the USA. Google Cloud EMEA Limited uses Google LLC as a sub-processor for this.
Vercel Inc. and Google LLC are certified under the EU-US Data Privacy Framework. These transfers are therefore covered by the European Commission’s adequacy decision of 10 July 2023 under Art. 45 GDPR.
For third countries without an adequacy decision, Google’s data processing terms provide for the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). Vercel’s privacy notice refers to standard contractual clauses or other appropriate legal mechanisms for such transfers.
You can request a copy of the clauses at hi@golas.ch.
Copying the address
The button next to the email address only places the address on your clipboard. Nothing is transmitted.
Your rights
You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17) and to restriction of processing (Art. 18).
If you gave me data for a project, you can receive it in a structured, commonly used and machine-readable format. You can also ask me to transmit it directly to another controller, where technically feasible (Art. 20).
To do so, write to hi@golas.ch.
Right to object
Where processing is based on Art. 6(1)(f) GDPR, you can object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).
This covers enquiries unrelated to a project and the server logs. After your objection, I will stop processing this data.
There are two exceptions. I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms. Or I need the data to establish, exercise or defend legal claims.
Server logs are created automatically for every visit, and I cannot switch them off for individual visitors. If you object to them, I will check whether protecting the website against attacks is such a compelling ground. I will tell you the result.
Complaints
You can lodge a complaint with a data protection supervisory authority, for example where you live or work (Art. 77 GDPR).
The authority responsible for Golasch GmbH is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
Do you have to provide data?
You do not have to provide any data. Without your IP address, however, Vercel cannot deliver the website, and without your email address I cannot reply to you.
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.