-> German/Deutsch Version
Introduction
This policy explains how I process personal data related to my online web applications.
Revision: April 3, 2025
I value your privacy. I am committed to collecting only the necessary
data to provide my online services and respond to your inquiries.
Types of Data Being Collected
- - IP Address
-
- Communication Information (E-Mail, Content, Timestamp, Sender
Details, CCs)
Purpose of Collected Data
- IP addresses (via Cloudflare): DDoS and spam protection,
providing the service
- Email Communication: General communication
Hosting Provider
My online web applications are primarily hosted by:
Email Management Providers
My email communication is managed by the following providers:
- Cloudflare, Inc. (https://www.cloudflare.com/privacypolicy/)
While Cloudflare technically manages incoming and outgoing emails,
their privacy policy states they do not process or read the content
of emails for purposes other than providing the services. - Purpose: Management of incoming and outgoing emails. Technically
has the ability to access email content.
- Google (Gmail) (https://policies.google.com/privacy/)
While incoming emails are ultimately delivered to Google's Gmail
service, their privacy policy indicates they do not process or read
the content of these emails for purposes other than providing the
service. - Purpose: Final destination for incoming emails.
- Brevo SA (formerly Sendinblue) (https://www.brevo.com/legal/privacypolicy/)
While Brevo is used for sending outgoing emails and technically has
the ability to access content, their privacy policy states they do
not process or read the content of these emails for purposes other
than providing the service. Tracking in outgoing emails is disabled
unless its a compain. - Purpose: Sending outgoing emails. Technically has the
ability to access email content. Tracking is disabled.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
-
Right to access: You can request information about your personal data.
-
Right to rectification: You can request corrections to inaccurate
data.
-
Right to erasure: You can request the deletion of your data under
certain conditions.
-
Right to restriction of processing: You can request to limit the
processing of your data under certain conditions.
-
Right to data portability: You can receive your data in a portable
format.
-
Right to object: You can object to the processing of your data under
certain conditions.
-
Right to withdraw consent: You can withdraw your consent at any time.
-
Right to lodge a complaint: You can file a complaint with a data
protection authority.
To exercise these rights, please contact me using the details above.
Contact via Other Means
If you contact me through other platforms (e.g., LinkedIn), their privacy policies
will apply.
Relevant Legal Bases
Below is an overview of the legal bases under the
General Data Protection Regulation (GDPR / DSGVO)
on which I process personal data. Please note that, in addition to the GDPR
regulations, national data protection laws may apply in your or my country
of residence. If more specific legal bases are applicable in individual cases,
I will inform you of them in my privacy policy.
- Consent (Art. 6(1)(a) GDPR / DSGVO) – You have given your
consent.
- Legitimate Interests (Art. 6(1)(f) GDPR / DSGVO) – Necessary
for my or a third party's legitimate interests.
- Contract Performance (Art. 6(1)(b) GDPR / DSGVO) – Necessary
for a contract or pre-contractual measures.
- Legal Obligation (Art. 6(1)(c) GDPR / DSGVO) – Necessary
to comply with a legal obligation.
National data protection regulations (e.g., the Federal Data Protection Act (BDSG) in Germany) also apply.
Security Measures
I take appropriate technical and organizational measures to protect your
data.
SSL Encryption (https): Used to protect data transmitted
via online services.
Disclosure of Personal Data
Data is disclosed to Cloudflare for hosting and email management. Your
email content is also accessible by Gmail and Brevo.
Data will not be shared with other third parties unless legally
required.
Deletion of Data
Data is deleted according to legal requirements as soon as the purpose
for processing no longer applies.
Contact information from inquiries is typically kept as long as needed
for the request and follow-up, unless longer retention is legally
required. Server logs are kept for a limited period for security.
Data Processing in Third Countries
Data may be processed in countries outside the EU/EEA, including by
Cloudflare, Google, and Brevo. This is done in accordance with legal
requirements.
Social Media Presence
I use the following social media platforms; their privacy policies apply: