Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to the privacy policy below.

Data Collection on This Website

When you visit this website, technical data (e.g. internet browser, operating system, time of page access) is automatically collected. This data is collected automatically when you access the website.

2. Data Controller

The party responsible for data processing on this website is:

Email: [JavaScript required]

The data controller is the natural person who alone or jointly with others decides on the purposes and means of the processing of personal data.

3. General Information on Data Processing

Storage Duration

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with me until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless I have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place after these reasons cease to apply.

Data Recipients

In the course of operating this website, personal data may be transferred to the following recipients or categories of recipients:

• Hosting provider: Cloudflare, Inc. (see section "Hosting")
• Spam protection: Cloudflare Turnstile (see section "Contact Form")
• Email delivery: Resend, Inc. (see section "Contact Form")

Data Transfer to Third Countries

Due to hosting by Cloudflare, Inc. (USA) and the use of Resend, Inc. (USA) for email delivery, data may be transferred to the United States. Both providers are certified under the EU-US Data Privacy Framework (DPF) and thus ensure an adequate level of data protection pursuant to Art. 45 GDPR.

Obligation to Provide Data

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide personal data. However, the processing of technical data (e.g. IP address) is strictly necessary for the delivery of the website. Furthermore, the contact form cannot be used without providing your contact details.

Automated Decision-Making

Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place.

4. Hosting

This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include:

• Browser type and version
• Operating system used
• Referrer URL
• IP address of the accessing computer (possibly anonymised)
• Time of server request

This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of the website).

Data Processing Agreement

A data processing agreement (Data Processing Addendum) is in place with the hosting provider. Cloudflare is certified under the EU-US Data Privacy Framework. For more information, see the Cloudflare Privacy Policy .

5. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock icon in your browser bar.

When SSL/TLS encryption is activated, the data you transmit to me cannot be read by third parties.

6. Data Collection on This Website

Cookies & Tracking

This website does not use tracking cookies and does not employ any third-party analytics services (e.g. Google Analytics).

Cloudflare may set functional cookies that are technically necessary for the operation and security of the website (e.g. for bot protection). The legal basis for this is Art. 6(1)(f) GDPR (legitimate interest) and § 25(2)(2) TDDDG (technically necessary cookies).

Contact Form

When you send enquiries via the contact form, your details (name, email address, message content) are stored for the purpose of processing your request and in case of follow-up questions. I will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective handling of enquiries addressed to me (Art. 6(1)(f) GDPR).

The data you enter in the contact form will remain with me until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Spam Protection with Cloudflare Turnstile

To protect the contact form against automated abuse (spam), I use the "Turnstile" service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks in the background whether a form submission originates from a human, without displaying a traditional CAPTCHA.

During the check, the following data may be transmitted to Cloudflare:

• IP address
• Browser type and version
• Interaction data with the widget (e.g. mouse movements)
• Timestamp and duration of the page visit

Cloudflare does not use tracking cookies and uses the collected data exclusively for bot detection. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the contact form from spam). Cloudflare is certified under the EU-US Data Privacy Framework. For more information, see the Cloudflare Privacy Policy.

Email Delivery via Resend

The data entered via the contact form is forwarded to me by email using the "Resend" service provided by Resend, Inc., 2261 Market Street #4913, San Francisco, CA 94114, USA. Resend processes your name, email address and message solely for the purpose of technical delivery.

The legal basis is Art. 6(1)(b) GDPR (implementation of pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in the reliable delivery of contact enquiries). Resend is certified under the EU-US Data Privacy Framework. For more information, see the Resend Privacy Policy.

7. Your Rights

Under applicable law, you have the following rights at any time:

• Access to your personal data stored by me (Art. 15 GDPR)
• Rectification of inaccurate or incomplete data (Art. 16 GDPR)
• Erasure of your data stored by me (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)

Please contact the address listed in section 2 to exercise these rights.

Right to Object (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to the processing at any time for reasons arising from your particular situation. I will then no longer process the personal data concerned, unless I can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

Withdrawal of Consent

Many data processing operations are only possible with your express consent. You may withdraw any consent already given at any time. The legality of data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for me is: