Privacy policy

Last updated: 10 November 2026

1. Data controller

The controller responsible for processing personal data is the website provider identified in the Legal notice, where you can find the controller’s full name, address, and contact details.

You can use the contact details provided there to ask questions about data protection or to exercise your rights.

2. Website delivery and hosting

This website is hosted using Cloudflare Workers, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

When you access the website, Cloudflare processes technical connection, request, traffic-routing, and security data, including your IP address and information about the requested resource, to deliver and protect the website. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR); my legitimate interest is providing a secure and functioning website.

I do not create or maintain separate visitor access logs. Cloudflare may nevertheless retain technical request, network, and security data as part of operating and protecting its services. Cloudflare’s published retention criteria include the purpose of processing, the nature of the data, operational needs, and applicable legal obligations.

Cloudflare and its service providers may process personal data outside the European Economic Area, including in the United States. According to Cloudflare’s privacy policy, covered transfers from the EEA to the United States rely on Cloudflare’s EU-U.S. Data Privacy Framework certification and the European Commission’s adequacy decision under Article 45 GDPR. If that certification lapses or is invalidated, Cloudflare states that it relies on the European Commission’s standard contractual clauses, with additional measures where necessary. It also uses these clauses for other international transfers. Applicable contractual safeguards, including the clauses and their annexes, are described in Section 6 and the annexes of Cloudflare’s data-processing terms.

3. Contact by email or phone

When you contact me, I process the data you provide to handle and respond to your enquiry. This may include your name, business contact details, message content, attachments, and information about your request. Emails also involve communication data such as the sender, recipient, and time sent.

If your enquiry concerns entering into or performing a contract with you, processing is based on Article 6(1)(b) GDPR. Other enquiries, including communication with a company’s contact persons, are handled on the basis of Article 6(1)(f) GDPR. The legitimate interest is to respond to enquiries and conduct business communication.

Providing your information is voluntary. Without the information necessary to handle your enquiry, I may be unable to respond to it.

Email provider Proton Mail

I use Proton Mail to receive, send, and store business emails. The provider is Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. Switzerland is covered by a European Commission adequacy decision under Article 45 GDPR.

Clicking my email address copies it to your clipboard without sending a message or transmitting the copied address to a server.

Further information is available in the Proton Mail privacy policy, Proton’s general privacy policy, and the European Commission’s information on adequacy decisions.

Retention of enquiries

Enquiries are deleted once they have been dealt with and the data is no longer needed for further communication. Where statutory retention obligations apply, the necessary data is retained on the basis of Article 6(1)(c) GDPR until the applicable retention period expires. Where data is necessary to establish, exercise, or defend legal claims, it is retained on the basis of Article 6(1)(f) GDPR; my legitimate interest is protecting my legal rights. This data is deleted once it is no longer required for these purposes and no statutory retention obligation remains.

4. Storing your theme preference

This website offers light and dark display modes. If no choice has been saved, the theme preference reported by your browser or operating system is used.

When you select a mode using the theme switcher, your preference is saved in your browser’s local storage for future visits.

Storage serves to provide the display feature you have expressly selected and is based on Section 25(2), no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is to provide and retain your chosen display mode.

The setting remains stored until you overwrite it or delete the corresponding website data in your browser.

5. Audience measurement and website content

This website does not use browser-based audience measurement or advertising trackers.

The profile photo, company logos, and fonts are served directly from this website.

The consulting page contains ordinary links to LinkedIn, GitHub, and Xing. No social media plugins from these providers are embedded. When you open an external link, you leave this website. The respective provider is responsible for data processing on the destination website; its privacy information also applies.

7. Your rights

Subject to the applicable legal conditions, you have the right to:

  • Access your personal data under Article 15 GDPR;
  • Have inaccurate data rectified under Article 16 GDPR;
  • Have data erased under Article 17 GDPR;
  • Restrict processing under Article 18 GDPR;
  • Data portability under Article 20 GDPR.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation.

8. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, your place of work, or the place of the alleged infringement.

The supervisory authority responsible for my business location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW):

PO Box 20 04 44
40102 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de