Legal

Privacy policy

Last updated: October 2026

1. Controller

You can reach me, including for any of the rights set out in section 7, through the contact form on this website.

2. Hosting and server log files

This website is hosted on servers located in Chicago, Illinois, United States, operated by Shock Hosting LLC, a company established in the United States (Piscataway, New Jersey). When you visit, the server processes technically necessary data: IP address, date and time, page requested, referrer, browser and operating system. The purpose is delivering and securing the website (Art. 6(1)(f) GDPR). Log files are deleted on a routine basis; I have not yet obtained the exact retention period from the provider and will update this policy once it is confirmed.

The provider is established in the United States (Piscataway, New Jersey), and the servers are located in Chicago, Illinois, United States — both outside the European Economic Area, so your data is transferred to a third country. Transfer safeguard: not yet confirmed — a signed data processing agreement is being sought, and this site is migrating to a host established in the EU.

3. Contact form and email

If you contact me through the form or by email, I process your name, email address and message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR (responding to enquiries). The form itself is processed on this server; no third-party form provider is involved. Messages are delivered via Google LLC (Google Workspace) (United States), which participates in the EU-U.S. Data Privacy Framework. I delete enquiries once they are resolved and no statutory retention obligations apply.

4. Spam protection

The form includes a hidden field that only automated programs fill in, and a limit on submissions per IP address. For this, the IP address is stored solely as a non-reversible hash for at most one hour. No cookies are set and no data is transmitted to third parties. The legal basis is Art. 6(1)(f) GDPR.

5. Fonts

All fonts are served locally from this server. No connection is made to third-party servers.

6. Cookies and analytics

This website sets no cookies, uses no local storage, and embeds no analytics or tracking services. Consent under § 25 TDDDG is therefore not required.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw consent with future effect (Art. 7(3)). You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Right to object (Art. 21 GDPR): where I process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

8. Encryption

This website uses TLS encryption (visible as “https://”). No automated decision-making or profiling takes place.