Privacy policy

1. Controller

2. Hosting and server log data

This website is hosted using GitHub Pages, a service provided by GitHub. When you access the website, the hosting provider may process technical connection data such as your IP address, date and time of access, requested files, referrer URL, browser type, operating system and access status. This processing is technically necessary to deliver the website, maintain its stability and security and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable provision of this website. GitHub may process data in the United States. GitHub states that it participates in the EU-US Data Privacy Framework and uses additional safeguards where required. Further information is available in the GitHub Privacy Statement. Log data is retained in accordance with the hosting provider’s applicable retention rules and deleted when it is no longer required for the stated purposes.

3. Contact form and FormSubmit

If you use the contact form, the information you enter, including your name, email address, organisation, requested support, project information, timeline and required capacity, is transmitted to FormSubmit and forwarded to me by email. Technical metadata such as the IP address and time of submission may also be processed for delivery and abuse prevention.

The processing is based on Article 6(1)(b) GDPR where your enquiry concerns a potential or existing contractual relationship. For other enquiries, the legal basis is Article 6(1)(f) GDPR and the legitimate interest is responding to your message. FormSubmit states that form submissions are retained for 30 days. Further information is available in the FormSubmit privacy information.

Providing the fields marked as required is necessary for me to respond to the enquiry. The remaining information is voluntary. You can contact me directly by email instead of using the form.

4. Email communication

Messages sent to me are processed using iCloud Mail, a service provided in the European Economic Area by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple may process data through affiliated companies and service providers outside the European Economic Area, including in the United States. Apple states that international transfers are governed by standard contractual clauses where required. Further information is available in the Apple Privacy Policy.

The legal basis is Article 6(1)(b) GDPR for contract-related communication and Article 6(1)(f) GDPR for other correspondence. The legitimate interest is efficient communication and responding to enquiries.

5. Storage duration

I retain enquiries only for as long as necessary to process and conclude the relevant communication. Data may be retained for longer where this is necessary to establish, exercise or defend legal claims or where statutory tax and commercial retention obligations apply. Once the applicable purpose and retention obligations cease, the data is deleted.

6. Theme preference and cookies

This website does not use analytics, advertising tracking or marketing cookies. Your choice between the beige and black display modes is stored locally in your browser under the key site-theme. This preference remains on your device and is not transmitted to me. The storage is necessary to provide the display setting you expressly selected and is based on Section 25(2)(2) TDDDG. You can remove it by deleting the website data in your browser.

7. Recipients and international transfers

Personal data is disclosed only where necessary to operate the website, deliver messages, comply with legal obligations or protect legal rights. Relevant service providers may include GitHub for hosting, FormSubmit for form delivery and Apple for email. Where data is transferred outside the European Economic Area, the transfer is based on an adequacy decision, certified participation in the EU-US Data Privacy Framework or appropriate safeguards such as standard contractual clauses, as applicable.

8. Your rights

Subject to the applicable legal requirements, you have the right to access your personal data, request rectification or deletion, restrict processing, receive data you have provided in a portable format and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for a controller based in Berlin is:

9. Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.