Privacy policy

Information pursuant to Art. 13 GDPR
Last updated: September 2026
This translation is provided for convenience. Only the German version is legally binding.

1. Controller

2. At a glance

• This website sets no tracking or advertising cookies and uses no third-party tracking services. The only exception: if you choose a language yourself, a technically necessary cookie remembers that choice (see section 8).
• For anonymous visitor statistics I use my own cookieless analytics on my server in Germany (see section 5). IP addresses are not stored.
• Fonts, scripts, images and videos are loaded exclusively from my own server. No third-party content (e.g. Google Fonts, CDNs, social media plugins) is embedded.
• There is no contact form and there are no user accounts.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the website, the web server automatically records information that your browser transmits (server log files):

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• referrer URL (the previously visited page)
• browser and operating system used

This processing is based on Art. 6(1)(f) GDPR. My legitimate interest lies in delivering the website without technical errors and keeping it secure (e.g. defending against attacks). The data is not combined with other data sources and is deleted once the retention period set by the host has expired. A data processing agreement under Art. 28 GDPR is in place with IONOS.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

5. Anonymous analytics (own statistics, without cookies)

To understand how this website is used (e.g. how many people visit it, which sites they come from and how far they read), I use statistics I developed myself. They run exclusively on my web space at IONOS in Germany. No data is passed on to third parties.

What is collected

• the page visited, the time, the referring website (domain name only, e.g. “linkedin.com”) and, if present, a campaign identifier from the address (utm_source)
• device type (smartphone, tablet, desktop), browser and operating system family derived from the user agent, and the browser’s preferred language
• which sections of the home page became visible, clicks on “Download CV”, LinkedIn, GitHub, email and the navigation, and the active time on the page (only while the tab is visible)

How you stay anonymous

• The statistics set no cookies and store no information on your device.
• Your IP address is not stored. To count visits on the same day, a shortened checksum (hash) is formed from the IP address, the user agent and a random daily value. The daily value is generated anew each day and the old one deleted, so the checksum can neither be traced back to you nor linked to visits on other days.
• No profiles are created and no data is combined with other sources.
• If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is recorded.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in evaluating the reach and use of my portfolio in anonymous form and improving the website. The raw data is deleted automatically after 13 months. You can object to the collection at any time by enabling “Do Not Track” or “Global Privacy Control” in your browser, or by sending me an email.

6. Contact by email

If you send me an email, I process the information you provide (email address, name, content of the message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if the enquiry concerns a contract or employment, and otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). The data is deleted as soon as it is no longer needed for handling the enquiry, unless statutory retention obligations apply.

For my mailbox I use Gmail, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).

7. Links to other websites

This website contains simple links to LinkedIn and GitHub. Merely visiting this website does not transmit any data to these services. Only when you click a link do you leave this website. The respective provider is responsible for the data processing there.

8. Language setting

The website is available in English, German and French. If you choose a language in the language switcher (EN · DE · FR), your browser stores this choice in a cookie named lang. It contains only the language code (e.g. en), is sent only to this website and is deleted after 12 months. Its sole purpose is to show you the website in your language again on your next visit; it is not used for statistics or tracking. When you switch language, the browser also briefly stores your current reading position in session storage (sessionStorage) so that the next page continues at the same place; this entry is deleted immediately afterwards.

As long as you don’t choose a language, no cookie is set, and the language follows your browser’s language setting. Storing the choice is strictly necessary to provide the function you explicitly requested (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG) and therefore does not require consent. You can delete the cookie in your browser at any time.

9. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise these rights, simply contact me by email.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.