Privacy
This privacy notice informs you, in line with Art. 13 and 14 GDPR, how personal data is processed when you visit this website, when you check a website and when you get in touch.
1. Controller
The controller within the meaning of the GDPR is the provider named in the legal notice. Contact details are on the Legal notice page.
2. Data protection officer
Appointing a data protection officer is not legally required. For privacy questions, please use the contact address in the legal notice.
3. What data is processed
Visiting the website. When you open this website, the hosting provider processes technically necessary connection data: IP address, time, requested page, browser and device details. This website uses no analytics or tracking services. Fonts and scripts are served from the same domain; no third-party content is loaded.
Contact form. When you submit the form, I process your name, email address, the selected topic and your message in order to reply to you. Your IP address is used briefly for rate limiting and abuse prevention.
Checking a website on the home page. When you enter a domain name on the home page and choose “Check”, that hostname goes through Cloudflare (as all requests to this website do) to this website’s own scanner. The scanner runs on a server of 1blu AG in Berlin and opens the start page of the website you entered in a fresh browser. 1blu hosts the server as a processor under a data processing agreement pursuant to Art. 28 GDPR. The stored result contains only hostnames, counts, the outcome of the consent check and the scan environment. It holds no page content, no URL paths or queries and no cookie values, and is kept for six hours. Your IP address is used only for the rate limit in this website’s Cloudflare Worker. Before the Worker passes the request on to the scanner, it replaces your IP address with a fixed placeholder address. The scanner does not store the request headers and does not log their contents. Neither the Worker nor the scanner logs IP addresses or entered hostnames; Cloudflare’s own processing follows the Cloudflare section.
Email. If you write to me directly, I process the information you provide in order to handle your request.
4. Legal bases
Delivering the website, rate limiting and abuse prevention are based on my legitimate interest in secure and stable operation under Art. 6 (1) (f) GDPR.
Your contact enquiry is processed under Art. 6 (1) (b) GDPR where it aims at working together, and otherwise under Art. 6 (1) (f) GDPR on the basis of my legitimate interest in answering enquiries.
Checking a website on the home page is based on my legitimate interest in making websites’ data flows understandable under Art. 6 (1) (f) GDPR.
5. Recipients and processors
Cloudflare, Inc.: hosting and delivery. The website is delivered through Cloudflare, which also runs the contact-form processing. The connection data described above is transmitted. Based in the USA, with processing regions worldwide.
Resend, Inc.: email delivery. Resend delivers your form message to me as an email. Name, email address, content and delivery metadata are transmitted. Based in the USA.
1blu AG: running the scanner. The scanner for the check on the home page runs on a server of 1blu AG. The hostname you enter is transmitted. Based in Berlin, Germany.
With Cloudflare and Resend, data processing agreements are incorporated through each provider’s standard online terms; with 1blu AG there is a data processing agreement pursuant to Art. 28 GDPR.
6. Transfers to third countries
Cloudflare and Resend may transfer personal data to the USA. Transfers are based on standard contractual clauses under Art. 46 (2) (c) GDPR and supplementary technical and organisational measures. Where the provider is certified under the EU–U.S. Data Privacy Framework, the European Commission’s adequacy decision applies in addition. 1blu AG is based in Germany, so nothing is transferred to a third country there.
7. Retention
I keep contact enquiries for as long as needed to handle your request and delete them afterwards, unless statutory retention obligations apply. Rate-limiting data is held only briefly. Results of a website check are kept for six hours.
8. Cookies and local storage
This website sets no cookies. Your chosen article text size is kept in your browser’s local storage; a contact-form draft, and a note that the home page’s opening has already played, stay in session storage until you close the tab. These entries serve only the function you are using (§ 25 (2) no. 2 TDDDG) and never leave your browser.
9. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). An informal message to the contact address in the legal notice is enough to exercise them.
10. Right to complain to a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in your country of residence or at the place of the alleged infringement. The provider’s competent supervisory authority: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de
Last updated: 25 October 2026