Privacy notice

This notice describes which personal data is processed when you visit this website and when you contact me. The controller is named above. I have not appointed a data protection officer because § 38 BDSG does not require one.

In short

• This website sets no cookies and uses no tracking, analytics, or advertising.
• Nothing is loaded from third parties when a page opens. Fonts, scripts, and images all come from this server.
• I process data only when you open a page (server logs) and when you contact me.

Hosting and server logs

The website runs on a server of Hetzner Online GmbH in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.

On every request, the web server processes technically necessary data: your IP address, date and time, the requested address, the HTTP status code, the amount of data sent, and information about your browser and operating system. This is needed to deliver the page, keep the service stable and secure, and find errors. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in secure, error-free operation). Logs are deleted automatically after 7 days. I do not use them to draw conclusions about you personally.

Contact form

When you submit the form, I process your name, email address, message, the optional project type, and the language of the page. Transmission is encrypted with HTTPS. The server forwards the details as an email to my mailbox at mailbox.org (Heinlein Support GmbH, Berlin), with which I have a data processing agreement. There is no database in which messages are stored.

The purpose is to handle your inquiry. The legal basis is Art. 6 (1)(b) GDPR when it concerns preparing a contract, otherwise (f), my legitimate interest in answering inquiries.

To protect against abuse, the form contains a field that is invisible to people and that bots fill in. The server also counts submissions per IP address (at most 5 in 10 minutes). That counter exists only in memory and is discarded after 10 minutes.

I delete inquiries that do not lead to a project 6 months after the last message. If a contract is concluded, I keep the business records for as long as commercial and tax law require. Please do not send passwords or sensitive personal data.

Email

If you write to me directly by email, the same purposes, legal bases, and retention periods apply. Mail is received through mailbox.org. Ordinary email is not end-to-end encrypted and can in principle be read in transit.

Storage in your browser

When you switch dark mode on or off, your browser stores that choice (“light” or “dark”) in local storage under the name theme. The value stays on your device, is not sent to the server, and contains nothing about you personally. Because it is stored only at your explicit request, no consent is needed under § 25 (2) no. 2 TDDDG. You can delete the entry in your browser settings at any time.

Links to other websites

When you click a link to a client project or another external site, you leave this website, and the operator’s privacy notice applies from then on. Merely displaying a link does not transmit any data.

Recipients

Only the two providers named above receive your data: Hetzner Online GmbH (hosting) and mailbox.org (email). Both process it in Germany. I do not transfer data to countries outside the EU.

Your rights

Towards me as the controller, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). Where I process data based on a legitimate interest, you may object at any time on grounds relating to your particular situation (Art. 21). Simply write to the email address above.

You can also lodge a complaint with a data protection authority, for example the one named above that is responsible for me.

No obligation to provide data, no automated decisions

The details in the contact form are voluntary. Without a name, email address, and message, I cannot reply to you. There is no automated decision-making, including profiling.

Changes

I update this notice when the website or the law changes. The version published here applies, and the date is shown at the top of the page.