Privacy policy

1. Controller

Amy Mary Dwyer, Sense & Signs, Höhenkirchener Str. 12, 85662 Hohenbrunn, Germany. Email: amy@senseandsigns.com

2. General

I process personal data only as far as needed to run this website and answer your enquiries. This website uses no cookies and loads no fonts from external servers. Section 4 describes the usage data collected by visitor analytics.

3. Hosting and server log files

This website is provided via Lovable (Lovable Labs Incorporated, 1 Lincoln St, Boston, MA 02111, USA). When you visit the site, the hosting provider processes technically necessary data such as your IP address, date and time of access, the page requested, browser and operating system. This keeps the website secure and stable.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is operating the website securely. A data processing agreement is in place with the provider. Transfers to the USA are based on the EU Standard Contractual Clauses.

4. Visitor analytics

This website uses the visitor analytics provided by Lovable to understand how the site is used and to improve it. Collected: the pages visited, the time and duration of a visit, where the visit came from (for example a previous website or campaign parameters), the country, and browser and device type. In addition, clicks on page elements, page loading and performance measurements, and browser error reports are collected when something does not work.

The analytics works without cookies and stores nothing in your browser. Each visit gets a randomly generated identifier that is discarded when the visit ends; it is not linked to a person or to a user account. The analytics script is served from the website's own domain, so no external analytics service receives the data. Processing runs on the infrastructure of the hosting provider Lovable (section 3).

No session replays are recorded.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is running the website in a way that matches how it is actually used. Browsers that send the Global Privacy Control signal do not transmit click or interaction data.

5. Contact form and email

When you write to me via the contact form or by email, I process your details (name, company, email address, topic and message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR.

Form enquiries are stored in a Supabase database (Supabase Inc., USA), run via Lovable Cloud; the servers are in the EU (Ireland).

I receive an email notification for every enquiry. Our mailbox is hosted by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); the notification is sent through the technical service provider at notify.senseandsigns.com.

I delete enquiries after 12 months at the latest, unless statutory retention duties apply or the enquiry leads to an engagement.

6. Links to LinkedIn

This website contains plain links to LinkedIn, no embedded plug-ins. No data is transferred to LinkedIn until you click a link.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). An email to amy@senseandsigns.com is enough.

You may also complain to a data protection supervisory authority. The authority responsible is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Last updated

5 November 2026. I update this policy when the website or the law changes.