Privacy policy
This is a translation for convenience. The German version is legally binding.
In short: this website sets no cookies, uses no tracking and loads no content from third-party servers.
Controller
Hendrik Paul, Taxon LabsAm Rande 13, 34128 Kassel, Germany
Email: privacy@taxonlabs.com
Hosting and server logs
This website is served via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the website, Cloudflare processes technically necessary data: your IP address, date and time, the page requested and details about your browser and operating system. This is needed to deliver the website and protect it against attacks.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure and stable operation of the website. A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR).
Fonts
The typeface used (Inter) is hosted on this server. No connection is made to Google Fonts or any other provider.
Contact by email
If you write to me, I process your email address and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns an app or a contract, otherwise Art. 6(1)(f) GDPR. My email provider is mailbox.org (Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany); the data is stored in Germany. I delete messages once they are no longer needed, unless statutory retention periods require longer storage.
Apps
Krest has its own privacy policy: krestapp.com.
GetShitDone: the privacy information for the app will be added here before the app is released on the App Store.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). Write to privacy@taxonlabs.com.
You can also lodge a complaint with a data protection supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
Last updated: November 2026