Privacy Policy

Controller

The controller for the data processing on this website is:

Hosting and server log files

This website is hosted on a server operated by Contabo GmbH (Aschauer Straße 32a, 81549 München, Deutschland). The host processes the log data described below on my behalf; a data processing agreement pursuant to Art. 28 GDPR is in place for this.

On every request, the server automatically stores information in so-called server log files: the IP address of the requesting device, the date and time of access, the specific page requested, the previously visited page (referrer), and the browser and operating system used.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the technically error-free, secure and stable operation of the website. This data is not merged with other data sources and is deleted as soon as it is no longer required for the stated purpose.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the lock icon in your browser's address bar and by the „https://“ prefix. When encryption is active, the data you transmit to the site cannot be read by third parties.

Fonts

The website uses fonts that are embedded when the site is built and served from my own server. When the fonts load, no connection is established to third-party servers (such as Google Fonts); no data - in particular not your IP address - is transferred to third parties in the process.

Cookies and local storage

This website does not set any cookies and does not use cookies or comparable technologies for analytics or marketing purposes.

Technically necessary information - such as whether the short intro animation has already been shown in this session - is stored exclusively in your browser locally and is not transferred to the server or evaluated.

Contacting me by email

If you send me an email, I process the details you provide (email address, name and the content of your message) solely to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry serves to initiate or perform a contract, otherwise Art. 6(1)(f) GDPR on the basis of my legitimate interest in responding. I store this data until your enquiry has been fully dealt with and no statutory retention obligations remain; it is then deleted.

External links and profiles

This website links to external profiles and pages (for example GitHub and LinkedIn). These are simple links - no data is transferred to these providers unless you actively click the respective link.

As soon as you follow a link, the privacy policy of the respective provider applies, over whose data processing I have no influence.

Web analytics with Umami

To understand how this website is used, I use the privacy-friendly analytics tool Umami. Umami runs self-hosted on my own server (the same Contabo infrastructure as the website); no analytics data is transferred to third parties.

Umami works without cookies and without cross-device or cross-site recognition. Your IP address is not stored permanently: from technical details of the request, only a non-reversible hash that changes daily is derived in order to distinguish visits roughly; it does not allow any conclusions to be drawn about you as a person. Only aggregated, anonymous metrics are collected, such as the page requested, the referring page, the approximate region of origin (country), and device and browser type.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the needs-based design and continuous improvement of this website. Since no cookies are set and no personal data identifying you is stored, no consent is required for this. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place; I will honour your legitimate objection under Art. 21 GDPR at any time.

Error and uptime monitoring

So that technical errors on this website can be detected and fixed quickly, I use the self-hosted tool GlitchTip. It runs on my own server (the same Contabo infrastructure as the website); no error data is transferred to third parties. If an unexpected error occurs in your browser or on the server, a technical error report is generated for it.

Only technical details of the error are collected: the error message together with its technical call chain (stack trace), the affected page, and the rough device and browser type. No cookies are set for this. Your IP address is not stored; it is removed before the report is sent. Your browser's error reports are also routed through this website's own domain, so that no connection to a separate server is established.

In addition, a self-hosted tool (Uptime Kuma) checks at regular intervals whether the website is reachable. For this it calls only this website's own technical addresses and processes no data from visitors.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the technically error-free, secure and stable operation of the website. Since no cookies are set and no personal data identifying you is stored, no consent is required for this. The error reports are deleted as soon as they are no longer needed for fixing the error.

Your rights

Within the limits of the law, you have the following rights at any time:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of a granted consent with effect for the future (Art. 7(3) GDPR)

Right to lodge a complaint with a supervisory authority

Irrespective of this, under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR. The authority responsible for my place of residence is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

Changes to this privacy policy

I will amend this privacy policy as soon as changes to the website or the legal situation make it necessary. The current version published here applies in each case.