Privacy Policy

Finn Maksimovic, trading as Expandr
Kutscherweg 32
75196 Remchingen
Germany

Email: finn@expandr.io

This website is hosted through Vercel. When you access the website, technical connection data may be processed, including your IP address, date and time of access, requested page, browser or device information, referrer information and similar server-log data.

This processing is necessary to provide the website and to maintain its security and stability. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

The homepage contains an embedded video delivered through YouTube's privacy-enhanced domain. When this content is loaded, your browser establishes a connection to Google/YouTube servers and technical data such as your IP address may be transmitted. Further processing is governed by the provider's own privacy terms.

If you contact us by email, we process the information you provide, such as your email address, name, message and any other information you voluntarily send, in order to handle your enquiry. Our business email is provided through Google Workspace.

Where your enquiry concerns a contract or steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR. For other business enquiries, the legal basis is Art. 6(1)(f) GDPR based on our legitimate interest in communicating with prospective clients, partners and other contacts.

Personal data may be processed by service providers that support the operation of the website and our business communications, in particular Vercel for website hosting and Google Workspace for email. Depending on the service and processing location, data may also be processed outside the European Economic Area. Where required, the providers rely on recognised transfer mechanisms such as adequacy decisions, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

We retain personal data only for as long as necessary for the purpose for which it was collected, unless statutory retention obligations require longer storage. Business correspondence may therefore be retained where required by applicable commercial or tax law. Server-log retention is determined by the technical and security requirements of the hosting service.

Expandr does not currently use its own advertising pixels or third-party analytics tools on this website. If additional analytics, advertising, booking or form services are introduced, this privacy policy will be updated before those services are used.

Under the GDPR, and subject to the applicable legal requirements, you may have rights to access, rectification, erasure, restriction of processing, data portability and objection to processing. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website.

We may update this privacy policy when the website, our services or the service providers used on it change. Last updated: August 2026.