1. Controller
The controller responsible for data processing on this website is Tobias Salbaum. Full contact details, including a postal address and email, are listed in the Impressum.
2. Hosting and server log files
This website is hosted by STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany). When you visit the site, the hosting provider's servers automatically collect and store information in server log files that your browser transmits. This may include: the requested page, browser type and version, operating system, referrer URL, the abbreviated IP address, and the date and time of the request.
This data is not merged with other data sources and is used solely to deliver the site, ensure its stability and security, and troubleshoot errors. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a reliable, secure website). Log data is stored only as long as necessary for these purposes and is then deleted. A data-processing agreement (Art. 28 GDPR) is in place with the hosting provider.
3. Cookies
This website does not set any cookies of its own, and does not use cookies for tracking or advertising. No cookie-consent banner is therefore required for the site's own functionality.
4. Web analytics (Umami)
To understand how the site is used, this website uses Umami, a privacy-focused analytics service provided by Umami Software, Inc. Umami is configured to be cookie-free and does not store personal data. It does not set cookies, does not create a persistent visitor identifier, and does not track you across other websites.
Umami collects aggregated, non-identifying statistics such as page views, referring sites, approximate country or region, and device or browser type. IP addresses are only used transiently to derive this information and are not stored in a way that identifies you. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the site's reach), and because no personal data is stored, no consent banner is required. Further information is available in the Umami privacy policy.
5. Fonts
The fonts used on this site (DM Sans and DM Mono) are hosted directly on this website's own server. They are not loaded from Google Fonts or any other third party, so visiting the site does not transmit any data to external font providers.
6. Embedded videos (YouTube, privacy-enhanced mode)
Some pages embed video from YouTube using the privacy-enhanced domain (youtube-nocookie.com). In this mode no cookies are set and no data is sent to YouTube until you actively start a video by clicking play.
When you play an embedded video, a connection to YouTube (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is established. YouTube then receives information including your IP address and which video you are watching, and may process this data, including transfers to servers in the USA on the basis of the EU Standard Contractual Clauses. This processing is outside my control and is governed by Google's terms. The legal basis for loading the video after your click is your consent under Art. 6(1)(a) GDPR, expressed by starting playback. See the Google Privacy Policy.
7. External links
This site contains links to third-party websites (for example LinkedIn, press articles and program pages). I have no influence over, and accept no responsibility for, how those third parties process personal data. Their own privacy policies apply once you follow such a link.
8. Contacting me
If you contact me by email, the data you provide (such as your email address, name and the content of your message) is processed solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or its initiation, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding). This data is retained only as long as needed to deal with your enquiry and any legal retention obligations, then deleted.
9. Your rights
Under the GDPR you have the right to:
- access the personal data held about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- restrict processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21); and
- withdraw any consent you have given, with effect for the future (Art. 7(3)).
To exercise any of these rights, contact me using the details in the Impressum.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for the private sector in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
11. Data security and automated decisions
This website is served over an encrypted TLS/SSL connection (recognisable by the padlock in your browser). No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
12. Changes to this policy
As the site develops, this policy may be updated to stay accurate and legally current. The version in force is always the one published here.
This document is provided for information and does not constitute legal advice; for a binding assessment please consult a qualified data-protection professional.