Privacy.

1. Controller

2. Website delivery and server logs

When this website is accessed, technically necessary data is processed. This may include the IP address, date and time, requested URL, referrer, browser, operating system and amount of data transferred. Processing is necessary to deliver the website securely and reliably. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Log data is deleted when it is no longer needed for these purposes, unless legal obligations or a security incident require longer retention.

3. Hosting with Microsoft Azure

The website is hosted through Microsoft Azure in a German data centre region. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes data required to deliver and protect the website on our behalf under a data processing agreement pursuant to Article 28 GDPR. Where Microsoft processes data outside the European Economic Area, the applicable safeguards, particularly adequacy decisions or standard contractual clauses, are used.

4. Cloudflare

Cloudflare is used in proxy mode for DNS, TLS, delivery and protection of the website. The provider is Cloudflare Germany GmbH, c/o Design Offices München Atlas, Rosenheimer Straße 143C, 81671 Munich, Germany. Connections are routed through Cloudflare's network. Cloudflare processes IP addresses, connection and security data to deliver content, mitigate attacks and maintain stability. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is security, availability and efficient delivery. Cloudflare acts under a data processing agreement. Transfers to the United States rely on the EU-US Data Privacy Framework and, where required, standard contractual clauses.

5. Contact by email or phone

If you contact us, we process the information you provide to respond to your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR. Data is deleted once the enquiry has been fully resolved, unless statutory retention duties apply.

6. Cookies and analytics

The website code does not set cookies and uses neither web analytics nor marketing tracking. No external fonts or embedded third-party media are loaded. Cloudflare may set technically necessary cookies when carrying out specific security checks. These cookies serve only website security and delivery. The legal basis for access to the user's device is Section 25(2) TDDDG and for subsequent processing Article 6(1)(f) GDPR. A consent banner for non-essential cookies is currently not required.

7. External links

The website links to external services, particularly GitHub and LinkedIn. The respective provider receives technically required connection data only when you follow such a link. The provider's privacy information then applies.

8. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

9. Security and updates

The website is transmitted using TLS encryption. We update this privacy policy when functions, service providers or legal requirements change.