1. Controller

The controller responsible for data processing on this website is:

2. General information

This Privacy Policy explains what personal data may be processed when you visit this website, why that processing may occur, the legal basis used, and what rights you have under applicable data protection law.

3. Hosting, delivery of the website, and server log files

When you visit this website, technically necessary data may be processed in order to deliver the website, ensure stability and security, and detect misuse.

This may include in particular:

• IP address
• date and time of access
• requested URL
• referrer URL
• browser type and browser version
• operating system
• access status / HTTP status code

Purpose: technical delivery, security, stability, error analysis, abuse prevention
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: secure and reliable operation of the website

Provider used: Cloudflare

4. Backend, database, and API services

This website uses technical backend, database, and API services to provide content and functionality.

This may include the processing of technical connection data, IP addresses, and application requests to the extent necessary for the operation of the website.

Purpose: operation of content delivery, API functions, and technical administration
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: proper technical operation of the website

Provider used: Supabase

5. External content and third-party sources

This website may load or display content from third-party sources, such as images, previews, media, or linked source material.

In such cases, it may be technically necessary to transmit your IP address to the relevant third party so that the content can be delivered to your browser.

Purpose: display of external content and media
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: functional and complete presentation of the website

6. Contact by email

If you contact me by email, I process the data you provide, such as your name, email address, and message, in order to handle your request.

Legal basis:

• Art. 6(1)(b) GDPR where your message relates to pre-contractual or contractual communication
• Art. 6(1)(f) GDPR in other cases

Legitimate interest: communication and handling of inquiries

Your data will be deleted once the request has been fully handled, unless legal retention obligations apply.

7. Advertising with Google AdSense / Google Ads

This website intends to display advertising through Google AdSense or Google Ads.

Depending on your consent choice and the actual ad setup, information may be stored on or accessed from your device, and personal data may be processed. This may include online identifiers, IP address, browser and device information, interaction data, ad delivery data, measurement data, and fraud-prevention data.

Non-essential advertising and tracking technologies are only activated after consent where legally required.

Purpose: ad delivery, measurement, ad selection and control, fraud prevention, financing of the website
Legal basis:

• Section 25 TDDDG where information is stored on or accessed from your device and consent is required
• Art. 6(1)(a) GDPR where personal data is processed on the basis of consent

Provider: Google / Google AdSense / Google Ads
Consent Management Platform (CMP): Google Privacy & Messaging

Further information may be provided in the consent banner and in linked provider information.

8. Cookies, local storage, and consent management

This website uses technically necessary storage technologies and, depending on your consent choice, may also use additional technologies for advertising, measurement, and related purposes.

Where storage of information on your device or access to such information is not strictly necessary, this will only take place with your consent where legally required.

You may change or withdraw your consent at any time via the privacy settings / consent settings on this website.

9. Recipients and international transfers

Recipients of personal data may include hosting providers, backend/database providers, content delivery providers, consent service providers, and advertising providers where required for the operation or monetization of the website.

Where providers process data outside the EU/EEA, this takes place only subject to applicable data protection requirements. Additional details may be provided in the information of the relevant provider and in the consent tool.

10. Retention period

Personal data is stored only for as long as necessary for the relevant purpose, unless longer retention is required by law.

11. Your rights

You have the following rights under the GDPR, subject to the applicable legal conditions:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to processing based on Art. 6(1)(f) GDPR
• right to withdraw consent at any time with future effect

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

13. No automated decision-making by me

I do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR myself. Where advertising providers or other third parties use such processes, this takes place within their own systems and, where required, on the basis of your consent.

14. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to this website, the services used, or applicable legal requirements.

Effective date: 13 March 2026