Privacy policy

1. Data controller

2. Website delivery and security

The website is hosted and protected by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When your browser requests a page or file, Cloudflare processes:

• your IP address and technical connection information;
• the requested URL, date and time, and referring page where your browser sends it;
• browser and operating-system information, request and response metadata, and diagnostic information.

This processing delivers the website, maintains its availability, diagnoses faults and prevents abuse. It is based on Article 6(1)(f) GDPR and my legitimate interest in operating a secure, reliable website. You are not legally or contractually obliged to provide this data, but without the necessary connection data the website cannot be delivered.

To the extent Cloudflare processes personal data on my instructions to provide these services, it acts as my processor. For certain processing necessary to operate and protect its own network and services, Cloudflare acts as an independent controller. Its privacy policy explains that processing and its retention criteria.

Cloudflare retains operational logs and analytics data for periods determined by the service and plan. On the Workers Free plan used here, Workers request and error logs are retained for up to three days. Other aggregated operational and security metrics may remain available for longer; Cloudflare documents the applicable dataset limits.

3. Traffic statistics

I use Cloudflare Zone Analytics to review aggregated request counts, data transfer, unique-visitor counts and countries of origin. IP addresses are processed, including to estimate visitor numbers and determine countries.

These statistics are generated from requests Cloudflare already processes to deliver this website. No analytics cookies, local-storage entries or client-side analytics scripts are used for these statistics.

The legal basis is Article 6(1)(f) GDPR: my legitimate interest in understanding website use and improving its reliability and performance. I do not combine these reports with correspondence or use them for personalised advertising.

The Zone Analytics dashboard provides aggregated statistics for a rolling period determined by the Cloudflare dataset and plan. These reports can remain available after detailed records expire; the applicable limits are documented in Cloudflare’s dataset documentation.

4. Browser features and external content

The website uses no analytics or advertising cookies, tracking pixels or Cloudflare Web Analytics beacon. The application does not save settings in local or session storage.

Fonts and graphics are delivered with the website. No external font services, social widgets or other third-party content are embedded. Ordinary links to external websites only open those services when you follow them; their providers then process data under their own privacy notices.

5. Email and telephone contact

If you contact me, I process the details you provide, such as your name, email address or telephone number, message, attachments and communication metadata, to handle your enquiry and respond.

If this processing is necessary to perform a contract with you or to take steps at your request before entering into one, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR and my legitimate interest in responding to communications addressed to me.

Email hosting is provided on my behalf by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Email data is stored on its servers in Germany. Telephone communications also involve the telecommunications providers carrying the call.

Contacting me is voluntary and is not a statutory or contractual requirement. Without sufficient information about your enquiry or a way to reach you, I may be unable to respond.

I delete correspondence once the enquiry and necessary follow-up are complete. If a statutory retention duty applies, storage for the required period is based on Article 6(1)(c) GDPR. If information is needed to establish, exercise or defend legal claims, storage is based on Article 6(1)(f) GDPR and is limited to the applicable limitation period.

6. Processing outside the EEA

Cloudflare’s global network, affiliates and subprocessors can process data in the USA and other countries outside the European Economic Area. Transfers to Cloudflare, Inc. in the USA rely on its EU–US Data Privacy Framework certification and the European Commission’s adequacy decision under Article 45 GDPR. For other transfers requiring safeguards, Cloudflare uses EU standard contractual clauses under Article 46 GDPR. The clauses and further details are available in its Data Processing Addendum.

7. Your rights

You can contact me using the details in section 1 to exercise the following rights, subject to their legal conditions:

• Access (Article 15 GDPR): find out whether I process your data and obtain information about that processing and a copy of your data.
• Rectification (Article 16 GDPR): have inaccurate data corrected and incomplete data completed.
• Erasure (Article 17 GDPR): have data deleted where the legal requirements are met, for example when it is no longer needed and no retention duty applies.
• Restriction (Article 18 GDPR): limit processing in the circumstances provided by law, for example while the accuracy of disputed data is checked.
• Portability (Article 20 GDPR): receive data you provided in a structured, commonly used, machine-readable format, or have it transferred where technically feasible. This applies to automated processing based on consent or a contract; it does not apply to the legitimate-interest processing described above.

You may complain to a supervisory authority under Article 77 GDPR, particularly in the EU member state where you live or work, or where an alleged infringement occurred. The authority responsible for my location is the Hamburg Commissioner for Data Protection and Freedom of Information.

I do not make solely automated decisions with legal or similarly significant effects on you within the meaning of Article 22 GDPR.

8. Your right to object

You may object at any time to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR).

I will stop that processing unless I demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. You can submit an objection using the contact details in section 1.