Privacy Policy

Note: This is a courtesy translation. Only the German version of this Privacy Policy (Datenschutzerklärung) is legally binding.

1. Data protection at a glance

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information can be found in the sections below.

Data processing on this website is carried out by the website operator (contact details under "Controller"). Some data is collected automatically when you access the site (mainly technical data such as browser, operating system, time of access); other data is collected when you actively provide it (e.g. by e-mail).

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

3. Hosting

This website is hosted externally by the following provider:

The personal data collected on this website is stored on the provider's servers in Germany; no transfer to third countries takes place. External hosting is carried out in the interest of a secure, fast, and efficient provision of the website by a professional provider (Art. 6 (1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR exists with the provider, ensuring that personal data is processed only on instruction and in compliance with the GDPR.

4. General information and mandatory disclosures

Legal bases for processing

Where you have consented to processing, we process your personal data on the basis of Art. 6 (1)(a) GDPR or § 25 (1) TDDDG, insofar as the consent covers access to your device. Where your data is required to perform a contract or pre-contractual measures, we process it on the basis of Art. 6 (1)(b) GDPR. To comply with legal obligations, we process data on the basis of Art. 6 (1)(c) GDPR. Otherwise, processing is based on our legitimate interest under Art. 6 (1)(f) GDPR. The applicable legal basis is stated in each relevant section below.

Recipients of personal data

Personal data is shared only where this is legally permitted or required. No data is shared with third parties for advertising or marketing purposes. The only recipient (as a processor) is the hosting provider named above; analytics with Matomo is self-hosted, with no disclosure to third parties.

Withdrawal of consent

Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out up to the point of withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

Where a processing activity relies on the legitimate-interest basis (Art. 6 (1)(f) GDPR), you may object to it at any time on grounds arising from your particular situation. The legal basis that applies to each activity is stated throughout this policy. Following an objection, we will continue processing the data in question only if we can show protective grounds that outweigh your interests and rights, or if the processing serves to enforce or defend legal claims (Art. 21 (1) GDPR).

SSL/TLS encryption

To protect data in transit, this site uses SSL/TLS encryption. You can tell the connection is encrypted by the "https://" prefix in the address bar and the padlock symbol shown by your browser. While encryption is active, the data you send cannot be read by third parties.

Note on data transmission

Data transmission over the internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

5. Data collection on this website

Server log files

When the pages are accessed, the provider automatically records data that your browser sends and writes it to log files:

• browser type and version
• operating system used
• referrer URL
• hostname of the accessing device
• date and time of the server request
• IP address

This information is not linked with other data sources. The legal basis is Art. 6 (1)(f) GDPR: operating a website technically requires collecting this data, and the operator has a legitimate interest in stable, secure operation. Shortening the IP address lessens the personal reference but does not remove the duty to inform or the need for this policy.

Enquiry by e-mail

If you contact the operator by e-mail (via a mailto link), your enquiry including the resulting personal data (e-mail address, content of the message) is stored for the purpose of processing it. This data is not shared without your consent. Processing is based on Art. 6 (1)(f) GDPR (legitimate interest in answering enquiries) or Art. 6 (1)(b) GDPR where the enquiry concerns a contract. The data remains with us until the purpose of storage ceases or you request deletion; mandatory statutory retention periods remain unaffected.

6. Web analytics with Matomo (cookieless, self-hosted)

This website uses Matomo, an open-source web analytics service, to statistically evaluate the use of the website — for example which pages are accessed, when, and from which region. Interactions such as clicks and events are also recorded in order to improve the content and navigation.

Self-hosted: Matomo runs exclusively on the same server in Germany (hosting.de). All analytics data remains with us and is not shared with third parties or transferred to third countries.

IP anonymization: Your IP address is shortened before analysis so that it can no longer be clearly attributed to you.

Cookieless analysis: Matomo is configured so that no cookies are stored in your browser.

Use is based on Art. 6 (1)(f) GDPR. The operator has a legitimate interest in analyzing usage behavior to optimize the website, without creating personal profiles. Because no cookies or comparable technologies are used to access your device, no consent under § 25 TDDDG is required.

7. Social media sharing buttons

Blog articles on this website display buttons that let you share an article on Bluesky, LinkedIn, Xing, or X (formerly Twitter), or copy the link to your clipboard.

No third-party scripts embedded: Unlike many other websites, no social plugins or SDKs from these providers are embedded for this purpose. Loading the page therefore involves no data exchange with Bluesky, LinkedIn, Xing, or X, and no cookies from these providers are set.

"Copy link" function: This function copies the article URL purely locally to your device's clipboard. No data is transmitted to us or to third parties in the process.

Share links: Only when you actively click one of the buttons for Bluesky, LinkedIn, Xing, or X does that provider's share page open in a new tab. Doing so transmits data such as your IP address to that provider; depending on the provider, this may include a transfer to third countries (e.g. the USA) over which we have no control. The nature and scope of that processing, and your rights in relation to it, are governed by the respective provider's privacy policy:

• Bluesky: https://bsky.social/about/support/privacy-policy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Xing: https://privacy.xing.com/de/datenschutzerklaerung
• X (Twitter): https://x.com/en/privacy

Providing this share function is based on Art. 6 (1)(f) GDPR (legitimate interest in easy distribution and reach of the content). Because no personal data is transmitted to the named providers until an active click, no consent under § 25 TDDDG is required.

8. Your rights

You have the right at any time to:

• access to the origin, recipients, and purpose of your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR) — e.g. where accuracy is contested, processing is unlawful, or an objection is pending
• data portability (Art. 20 GDPR) in a common, machine-readable format
• object to processing (Art. 21 GDPR)
• withdraw a given consent (Art. 7 (3) GDPR)
• lodge a complaint with a supervisory authority (Art. 77 GDPR)

An informal e-mail to the address above is sufficient to exercise these rights.

9. Duration of data storage

Unless a more specific storage period is stated, your personal data remains with us until the purpose of processing ceases or a statutory retention period expires. Server log files are deleted automatically after 30 days.

10. Status and changes

This privacy policy is dated June 2026. As the website develops or legal requirements change, it may become necessary to amend this privacy policy.

Legally binding version: the German Datenschutzerklärung. This English text is provided for convenience only.