Privacy policy

This is a translation. The German version is the authoritative one.

In brief

This website sets no cookies, does not recognize returning visitors, and loads nothing from external servers: no external fonts, no embedded videos, no third-party services. I process personal data only to the extent that it is technically necessary to deliver the pages, and when you write to me.

Hosting and server log files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin.

Each time a page is requested, Strato’s web server logs the access. This includes:

• the date and time of access
• the page or file requested and the status of the request
• the amount of data transferred
• the page you came from (referrer)
• browser and operating system
• the IP address; Strato stores it in the log files only in anonymized form

The log files serve the secure and stable operation of the website and the defense against attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are available to me for six weeks; I do not combine them with other data.

Statistics without cookies

I count how often each page is viewed in order to see what gets read. For this, every page reports its view to a script of my own on the Strato server. Only daily totals are stored:

• the page viewed and its language
• the origin: only the domain name of the page you came from, or “direct”
• the device class (phone, tablet, or desktop), derived from the window width
• clicks on links to other websites (only the domain name of the destination), opening the profile request, and views of addresses that do not exist

Not stored are your IP address, your browser’s identifier, or any characteristic by which I could recognize you. No cookie is set, and nothing is stored on or read from your device. No individual visit can be read from the totals; no personal data is created in the process.

Insofar as transmitting the view technically involves your IP address, the legal basis is Art. 6(1)(f) GDPR (my legitimate interest in understanding the use of the website in aggregate). I delete the totals after 25 months.

Contact form

When you write to me using the contact form, I process your name, your email address, the selected topic, and your message in order to reply to you.

• Transmission: A script of my own on Strato’s server checks the entries and sends them to me as an email. The message is not stored on the web server.
• Protection against abuse: So that the form is not misused for mass mailings, the script counts the submissions per connection. For this purpose, it does not store your IP address in plain text but only as a check value that cannot be traced back, and deletes it after 24 hours at the latest. In addition, it checks whether the form was filled out by a human; no personal data is generated in the process.
• Legal basis: Art. 6(1)(b) GDPR if your inquiry is aimed at a contract or at entering into one, otherwise Art. 6(1)(f) GDPR (my legitimate interest in answering inquiries and protecting the form against abuse).
• Storage period: Your message remains in my mailbox until your matter has been dealt with. After that, I delete it, provided that no statutory retention obligations stand in the way.

You do not have to use the form. Without a name, email address, and message, however, I cannot reply to you.

Contact by email

If you write to me directly by email, I process the information in your message for the same purpose, on the same legal basis, and for the same period as with the contact form. My mailbox is also hosted by Strato.

Links to other websites

The website links to other services, for example to booksellers such as Amazon, to LinkedIn, and to my other websites. These are simple links: Only when you click one does the respective provider receive data from you. That provider’s privacy policy applies to the processing there.

Recipients and transfers to third countries

Besides me, the only recipient of your data is Strato as the provider of hosting and email. I do not pass your data on to third parties and do not transfer it to countries outside the European Union.

Your rights

You have the right

• to obtain information about your data processed by me (Art. 15 GDPR),
• to have inaccurate data corrected (Art. 16 GDPR),
• to have your data erased (Art. 17 GDPR),
• to have the processing restricted (Art. 18 GDPR),
• to receive your data in a commonly used format (Art. 20 GDPR),
• to object to the processing insofar as it is based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

A message to me is all it takes. You can also lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

No automated decision-making or profiling takes place.

Changes

I update this policy when the website or the legal situation changes. The version on this page applies.

Last updated: October 2026