Privacy.

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Paul Schulte-Hunsbeck, reachable by email at [email protected].

This is a personal website. There are no user accounts, no comments, no newsletter and no contact form. Personal data is processed only in the cases described below: when you load the site (hosting), for audience measurement with your consent (Google Analytics), and when you email me.

The website is delivered via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you load the site, Cloudflare processes technically necessary data, in particular IP address, time of access, requested URL, referrer and browser identifier (user agent), to deliver the site and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and stable provision of the website. I do not analyse server logs myself.

Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the US rely on the European Commission’s adequacy decision (Art. 45 GDPR) and, additionally, on standard contractual clauses. More information: cloudflare.com/privacypolicy.

Only if you click “Accept” in the cookie notice do I use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (e.g. “_ga”, “_ga_*”) and processes pseudonymous usage data such as pages viewed, time on page, approximate origin (country/region), device type and browser. Google Analytics 4 does not store IP addresses for users in the EU.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer.

Data may be transferred to Google LLC in the US. Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Cookies are stored for up to 2 years; analytics data is deleted after the retention period set in Google Analytics, at most after 14 months. More information: policies.google.com/privacy.

The website stores two settings in your browser’s local storage: your choice in the cookie notice and your preferred language. This information does not leave your device and is not sent to me. The legal basis is § 25(2) no. 2 TDDDG (strictly necessary to provide the function you requested). You can delete it at any time via your browser settings.

All fonts are served directly from this server. No connection is made to Google Fonts or any other font provider.

If you email me, I process your email address, your name and the content of your message in order to reply. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry) or Art. 6(1)(b) GDPR where the matter relates to a contract. I delete the correspondence once it is no longer needed, unless statutory retention obligations apply.

The website links to external services, e.g. LinkedIn and a booking page on Google Calendar. These are only loaded once you click the link; from then on, the respective provider’s privacy policy applies.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time (Art. 7(3)). An email to [email protected] is enough for any request.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place. You are not obliged to provide personal data; you can use the website fully without giving consent.