Privacy policy
This is a translation for convenience. Only the German version is legally binding.
In short
- This website sets no cookies and uses neither local storage nor session storage.
- For anonymous reach measurement I use Cloudflare Web Analytics. The service works without cookies and creates no user profiles.
- No advertising, no social media plugins, no embedded third-party content. Fonts, images and video are served from the own server.
- There is no contact form. You can get in touch by email or through an external booking page.
Controller
David Sättler
Rheinstack
Wolw9ffsqxohnnospamstr7kaßezz@x 3
508spam27 Köln (Cologne), Germany
Email: dat0qensinvalidchuw9tz@qxrhenospamin-7kstazz@xck.spamde
I am not obliged to appoint a data protection officer because fewer than 20 people are constantly involved in the automated processing of personal data (§ 38 BDSG).
Encryption
This website is delivered exclusively over an encrypted connection (HTTPS with TLS). Data you transmit when visiting cannot be read by third parties.
Hosting and delivery
This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
When you visit the website, Cloudflare processes technically necessary data to deliver the pages and protect them against attacks. This includes the IP address, date and time of the request, the requested address, the referring page, the browser type (user agent) and the amount of data transferred. I do not store any server logs myself. Cloudflare keeps this data only as long as needed for delivery and security.
The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is a secure, fast and stable delivery of the website.
A data processing agreement under Art. 28 GDPR (Data Processing Addendum) is in place with Cloudflare. A transfer to the USA is possible. Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). The EU Standard Contractual Clauses apply in addition. More information: Cloudflare privacy policy.
Reach measurement with Cloudflare Web Analytics
To understand which pages are read and how fast they load, I use Cloudflare Web Analytics (provider as above). Your browser loads a small script from Cloudflare when you visit. It transmits the page visited, the referring page, load times as well as browser, operating system and device type. Only the country is derived from the IP address.
The service sets no cookies, stores nothing in your browser and does not recognise you on a later visit. It builds no user profiles and uses no fingerprinting. I only see aggregated figures, such as page views per day. I cannot draw conclusions about individual people.
The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is improving the website based on anonymous usage figures. You can object to the measurement at any time (Art. 21 GDPR) by blocking the script with a content blocker. The website then works unchanged.
Cloudflare processes the data as my processor under the agreement mentioned above. The information on transfers to the USA above applies.
No cookies, no storage on your device
This website stores no information on your device. No cookies are set and neither local storage nor session storage is used. That is why there is no cookie banner.
The source picker in the "Approach" section runs only in your browser. Your selection is neither stored nor transmitted.
Contact by email
When you email me, I process your email address, your name if given, and the content of your message. I use this data only to answer your enquiry.
The legal basis is Art. 6 (1) (b) GDPR if your enquiry aims at a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
I delete your message once it has been dealt with and no statutory retention obligations apply. I keep business letters for up to six or ten years under § 257 HGB and § 147 AO.
My email provider is mailbox.org, operated by Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany. The data is processed in data centres in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.
Booking through Cal.com
To book an intro call, I link to Cal.com. The booking page is not embedded in this website. It only opens when you follow the link. No data is sent to Cal.com before that.
The provider is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. When you book, Cal.com processes on my behalf your name, your email address, the chosen time and what you enter in the booking form. I use this data to prepare and hold the call.
The legal basis is Art. 6 (1) (b) GDPR (steps prior to a contract). A data processing agreement under Art. 28 GDPR is in place with Cal.com. Cal.com is certified under the EU-US Data Privacy Framework. The EU Standard Contractual Clauses apply in addition. On the booking page, the Cal.com privacy policy also applies.
I delete booking data once it is no longer needed for the call and a possible collaboration and no retention obligations apply.
Obligation to provide data
You are under no legal or contractual obligation to provide data. Without an email address or a booking, however, I cannot answer your enquiry.
Your rights
Under the GDPR you have the following rights:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
Right to object (Art. 21 GDPR): Where I process your data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation. I will then stop processing the data unless I can demonstrate compelling legitimate grounds that override your interests.
How to make a request
Write to dat0qensinvalidchuw9tz@qxrhenospamin-7kstazz@xck.spamde. I will answer your request without undue delay and within one month at the latest (Art. 12 (3) GDPR). To protect your data, I may ask you to prove your identity.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
www.ldi.nrw.de
Minors
This website is aimed at businesses. I do not knowingly collect data from people under 16.
No automated decision-making
I use no automated decision-making and no profiling under Art. 22 GDPR.
Changes
I update this policy when the website or the legal situation changes. The version published here applies.