Privacy Policy

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
René Robert Rosahl
Osterfeld 16 in
33829 Borgholzhausen
Germany
Email: [email protected]
Phone: +49 15560 902763

General information on data processing

I process personal data exclusively within the framework of the legal requirements, in particular the GDPR as well as the Telecommunications Digital Services Data Protection Act (TDDDG) for device-related access.
This privacy policy provides information about the type, scope, and purpose of the processing of personal data when visiting this website.

Hosting (netcup)

This website is hosted by netcup GmbH (netcup provides information on concluding a data processing agreement pursuant to Art. 28 GDPR).
When you access the website, data is processed for technical reasons through hosting/server operation in order to deliver the website and ensure security/stability.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure, stable operation of the website).

Retention period: Server log data is stored for 14 days and then deleted or anonymized, unless longer retention is required to investigate security incidents.
Recipient: netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany as a processor.

CDN / Reverse Proxy (Cloudflare)

For faster and more secure delivery of the website, I use Cloudflare’s content delivery network (CDN).
In doing so, Cloudflare processes personal data as a processor on behalf of the website operator in order to provide the services.
In this context, IP addresses and log data (“Customer Logs”) may be processed in particular.

Data transfers to third countries: Cloudflare states that processing may also take place outside the EEA.
For “restricted transfers”, Cloudflare provides for the application of the EU Standard Contractual Clauses (EU SCCs, Decision 2021/914) in its DPA.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, performant provisioning and protection against misuse/attacks).
Recipient: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA as a processor.

Contact (email/phone)

If you contact me by email or phone, I process the data you provide (e.g., name, email address, phone number, content of the inquiry) in order to handle your request.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).
Retention period: As a rule, I delete inquiries within 6 months after processing has been completed, unless statutory retention obligations exist.

LocalStorage (dark mode)

This website uses only a technically necessary key pair in localStorage to store the dark mode setting.
The legal basis for storing/reading this setting is Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation).
Retention period: The storage remains in place until you delete it in your browser settings.

Your rights

You have the rights to access, rectification, erasure, restriction of processing, data portability, and to object to certain processing (Art. 15–21 GDPR).
If processing is based on consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.
In North Rhine-Westphalia, the competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Contact details (e.g., PO box/phone) are listed, among other places, in official documents of the LDI NRW.