Privacy

Controller

Hosting and server logs

This website is hosted on a server operated by Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany), data-centre location: Nuremberg. A data processing agreement (Auftragsverarbeitungsvertrag) under Art. 28 GDPR is in place with the hosting provider. No data is transferred to third countries outside the EU/EEA.

On every request, the following technically necessary data is recorded in server log files: IP address, date and time, requested URL, HTTP status code, amount of data transferred, user agent (browser/OS) and referrer.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in stable and secure operation). Retention: at most 14 days, after which the data is deleted or anonymised.

Contact via email

If you contact me by email, I process your email address and the content of your message in order to handle your request. Legal basis: Art. 6 (1) lit. b or lit. f GDPR. The data is deleted as soon as it is no longer required for the purpose, unless statutory retention periods apply.

Contact form

If you use the contact form on the legal notice page, I process your email address, your name if you provide it, and the content of your message in order to handle your request. The data is not stored on the web server but forwarded to my mailbox as an email. Sending and the mailbox are provided by ALL-INKL.COM - Neue Medien Münnich (Hauptstraße 68, 02742 Friedersdorf, Germany).

To prevent mass sending, the server limits the number of messages per sender. For this, it holds your IP address briefly in memory, for at most 15 minutes; it is not stored.

Legal basis: Art. 6 (1) lit. b or lit. f GDPR, and Art. 6 (1) lit. f GDPR for the limit (legitimate interest in preventing abuse). The message is deleted as soon as it is no longer required for the purpose, unless statutory retention periods apply.

Web analytics with Plausible Analytics

This website uses Plausible Analytics for basic statistical analysis of visitor behaviour. Plausible is self-hosted on the same infrastructure as this website (Hetzner Online GmbH, data centre Nuremberg, Germany) — no data is transmitted to any third party.

Plausible uses no cookies, assigns no persistent visitor identifiers and stores neither IP addresses nor full user-agent strings. It records page views, traffic source, approximate geographic origin (country level only), browser type and operating system. To do so, the IP address is processed only briefly: to determine the country and, together with the user agent, to derive a daily visitor identifier (a hash using a random salt that changes daily and is deleted after 24 hours).

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in statistical analysis to improve the website). For details on Plausible's data handling:plausible.io/data-policy.

Encryption

This website uses TLS encryption (HTTPS) to securely transmit your data.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise these rights, please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR).