Privacy.

1. Controller

2. Website delivery and server logs

When this website is accessed, technically necessary data is processed. This may include the IP address, date and time, requested URL, referrer, browser, operating system and amount of data transferred. Processing is necessary to deliver the website securely and reliably. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Log data is deleted when it is no longer needed for these purposes, unless legal obligations or a security incident require longer retention.

3. Hosting with Microsoft Azure

The website is hosted through Microsoft Azure Static Web Apps behind a Cloudflare proxy. Static content is served from globally distributed locations. This may involve processing IP addresses and technical connection data outside the European Economic Area. Processing serves website delivery and security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.

Further information is available in the Microsoft Privacy Statement and the Azure Static Web Apps documentation.

4. Cloudflare

We use Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, in proxy mode for DNS, TLS, delivery and protection of the website. Connections are routed through Cloudflare's globally distributed network. Cloudflare processes IP addresses, connection and security data to deliver content, mitigate attacks and maintain stability. Processing outside the European Economic Area, particularly in the United States, is possible. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is security, availability and efficient delivery.

Further information is available in the Cloudflare Privacy Policy and the public Cloudflare Data Processing Addendum (DPA), including the provisions on international data transfers described there.

5. Contact by email or phone

If you contact us, we process the information you provide to respond to your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR. Data is deleted once the enquiry has been fully resolved, unless statutory retention duties apply.

6. Cookies and analytics

The current website code does not itself set cookies and contains no web analytics, marketing tracking, external fonts or embedded third-party media. Cloudflare may set cookies depending on the active security features and specific security checks.

A consent banner is only unnecessary if actual operation involves no storage access or integrations requiring consent. Section 25(2) TDDDG may apply to strictly necessary storage access; Article 6(1)(f) GDPR may apply to subsequent processing of personal data for website security.

7. External links

The website links to external services, particularly GitHub and LinkedIn. The respective provider receives technically required connection data only when you follow such a link. The provider's privacy information then applies.

8. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

9. Security and updates

The website is transmitted using TLS encryption. We update this privacy policy when functions, service providers or legal requirements change.