Privacy Policy

Data controller

TL;DR

No tracking. No cookies. Only technically necessary server log files.

Server Logs

The provider of this website (my server) automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and browser version
• Used operating system
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

These data are technically necessary to display the website and ensure the security of the server. A merge of this data with other data sources is not made. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Cloudflare (CDN / tunnel)

This website is served via Cloudflare (Cloudflare, Inc.) as a reverse proxy / tunnel. IP addresses, request metadata and technical connection data may be processed by Cloudflare (TLS termination, attack protection). Cloudflare acts as a processor; we do not use marketing tracking via Cloudflare. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, performant operation). Cloudflare may use standard contractual clauses.

cloudflare.com/privacypolicy

Local storage (localStorage)

This website stores localStorage entries in your browser for language choice (appLanguage) and privacy notice status (cookieBannerDismissed). This data does not leave your device, is not used for tracking and contains no personal profiles. Legal basis: Art. 6(1)(f) GDPR (technically sensible operation).

Security (Fail2ban)

To protect the server, IP addresses from server logs may be processed temporarily to detect and block attacks (e.g. via Fail2ban). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security).

Retention

• Server logs (nginx): up to 30 days, then automatic deletion or rotation.
• Email correspondence: until your request is handled, at most 24 months.
• localStorage: until you clear browser data or remove the entry manually.

Contact by email

If you contact us by email, the data you provide (e.g. email address, message content) is processed to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Email is handled via Google (Gmail); data may be transferred to third countries.

Your Rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability under the GDPR. Contact the email address above. You also have the right to lodge a complaint with a data protection supervisory authority.

Supervisory authority: The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate (LfDI RLP), Postfach 30 40, 55020 Mainz, Germany, https://www.datenschutz.rlp.de/