Controller
The controller for data processing on this website is the operator named in the contact page.
Scope of processing
This is a static website. There are no user accounts, no comment function, no forms, no analytics and no embedded third-party content. All fonts, stylesheets and scripts are served from my own server.
Cookies
This website sets no cookies. The choice between the light and dark theme is
stored locally in the browser (localStorage) only and is never sent to the
server.
Server log files
When pages are requested, the web server automatically logs data your browser transmits:
- shortened IP address
- date and time of the request
- requested address and amount of data transferred
- referrer URL
- browser type and operating system
This data is technically necessary to deliver the site and to ensure its stability and security. The legal basis is legitimate interest pursuant to Art. 6 (1) lit. f GDPR. It is not merged with other data sources and not evaluated for analytics.
The full IP address is never stored: nginx shortens it as it writes the log. IPv4 loses its last octet, IPv6 everything beyond the first two blocks. It can no longer be traced back to a person. The logs are deleted automatically after 14 days.
Hosting
The site runs on a dedicated server at netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup provides the hardware, connectivity and data centre; the web server itself is operated and administered by me. Because netcup has technical access to the systems, a data processing agreement pursuant to Art. 28 GDPR is in place.
Encryption
All traffic is transmitted over HTTPS.
Your rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). Please use the address given in the imprint. You also have the right to lodge a complaint with a data protection supervisory authority.