Privacy notice

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

There is no legal obligation to appoint a data protection officer for this website. Please direct any data protection matter to the address above.

This website sets no cookies and uses no identifiers that would allow you to be followed across page views or across websites. That is also why there is no cookie banner here: there is nothing to consent to.

This website is hosted as a static site with Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) using Cloudflare Pages. Cloudflare operates a global network, and delivery normally takes place via the geographically nearest location.

When the site is accessed, technically necessary connection data is processed — in particular IP address, time of request, resource requested, referrer and user agent. This processing is required to deliver the site and to defend against attacks.

The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in providing the website securely and reliably. A data processing agreement under Art. 28 GDPR is in place with Cloudflare; for transfers to the USA, Cloudflare relies on the Standard Contractual Clauses and the EU-US Data Privacy Framework.

If you use the contact form, the details you enter — name, email address, optionally company, and your message — are processed in order to answer your enquiry.

The form is processed by a Cloudflare Function; the resulting email is sent via the provider Resend. Both are bound as processors under Art. 28 GDPR and are based in the USA; the transfer relies on the European Commission’s Standard Contractual Clauses.

The enquiry then arrives in my email mailbox, which I operate via Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Microsoft is likewise bound as a processor under Art. 28 GDPR; where data is transferred to the USA, Microsoft relies on the European Commission’s Standard Contractual Clauses and the EU-US Data Privacy Framework.

The legal basis is your consent under Art. 6 (1) (a) GDPR, given expressly when you submit the form, together with Art. 6 (1) (b) GDPR where the enquiry is directed at entering into a contract. You may withdraw your consent at any time with future effect.

Providing your name, email address and message is voluntary. There is no statutory or contractual obligation to provide them — without them, however, I cannot answer your enquiry.

Enquiries that do not lead to a business relationship are deleted at the latest six months after the correspondence concludes. Where an enquiry leads to a contract, the statutory retention periods for business records apply.

The contact form is protected against automated submissions by a hidden check field. This runs entirely on the server; no additional data is collected and no external service is involved.

Cloudflare Web Analytics is used for audience measurement. The service works without cookies and without storing personal identifiers; only aggregate figures such as page views, referrer and approximate region are collected. Individual people cannot be recognised.

The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in the statistical evaluation of website use.

All fonts used on this website are served exclusively from our own server. No connection is made to Google Fonts or any other external provider, and your IP address is not transmitted to third parties for this purpose.

This website uses TLS encryption for security. You can recognise an encrypted connection in your browser’s address bar.

You have the right at any time to:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of legitimate interests (Art. 6 (1) (f) GDPR). On this website that concerns the processing of server logs described in section 3.

If you object, I will no longer process the data in question unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

An objection requires no particular form; a message to the address given under "Controller" is sufficient.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website.

Independently of the above, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement (Art. 77 GDPR).

The authority competent for me is: