Privacy policy

1. Controller

A data protection officer has not been appointed, as the legal requirements for doing so are not met.

2. Hosting

This website is hosted with IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. Processing takes place on the basis of Art. 6(1)(f) GDPR — my legitimate interest in a secure and efficient provision of this website. A data processing agreement under Art. 28 GDPR has been concluded with IONOS.

3. Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits: IP address, date and time of the request, the file requested, referrer URL, browser type and version, operating system, and the amount of data transferred. This data is not merged with other data sources. Legal basis is Art. 6(1)(f) GDPR — operational security and error analysis. Full IP addresses are deleted or anonymised after a maximum of seven days.

4. Cloudflare

This site uses Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, as a content delivery network, reverse proxy and DDoS protection. All traffic to this site passes through Cloudflare's infrastructure, which means IP addresses are processed there. Legal basis is Art. 6(1)(f) GDPR — my legitimate interest in the availability and security of the site.

Data may be transferred to the USA. The transfer is based on Cloudflare's certification under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR) and additionally on standard contractual clauses under Art. 46(2)(c) GDPR. A data processing agreement has been concluded with Cloudflare. Cloudflare may set the technically necessary cookie __cf_bm for bot detection.

5. Contact form, email and telephone

If you contact me via the form, by email or by telephone, the details you provide (name, email address, optionally telephone number, and the content of your message) are stored in order to process your enquiry and any follow-up questions.

Legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR — my legitimate interest in answering enquiries addressed to me. The data is deleted once your enquiry has been dealt with, at the latest after six months, unless statutory retention periods (§ 147 AO, § 257 HGB) apply. Submissions are not stored in a database; they are forwarded by email only.

6. Cookies

This site sets only technically necessary cookies:

• october_session — session management, expires at the end of the session
• XSRF-TOKEN — protection against cross-site request forgery, expires at the end of the session
• __cf_bm — Cloudflare bot detection, up to 30 minutes (only where bot management is active)
• theme — stored in local storage, not a cookie; remembers your light/dark preference and is never transmitted to the server

Because these are strictly necessary for providing the service you requested, no consent is required under § 25(2) no. 2 TDDDG. There are therefore no analytics, no advertising cookies and no cookie banner on this site.

7. Fonts and embedded content

Fonts are hosted on this server. No connection is made to Google Fonts or any other external provider, and no external scripts, maps, videos or social media widgets are loaded. No data leaves this site when you view it.

8. Encryption

This site uses TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the https:// prefix in the address bar.

9. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw consent at any time (Art. 7(3)). To exercise any of these rights, an informal message to [email protected] is sufficient.

10. Right to object (Art. 21 GDPR)

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. If you object, I will no longer process the personal data concerned unless I can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

11. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The authority responsible for me is:

12. No automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place on this site.