Privacy Policy

In short

This website sets no cookies and embeds no third-party services in its pages — no external fonts, no maps, no social plugins. Analytics run without cookies and without personal profiles, so no consent banner is required. Personal data is processed only when you write to me through the contact form or by email.

1. Controller

2. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. Server location: Deutschland (Nürnberg). On access, technically necessary server log files are processed: IP address, date and time of access, requested URL, referrer, user agent and HTTP status code.

This processing is necessary to serve the website securely, analyse errors, detect abuse and ensure technical stability. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

3. Contact form and email

When you write to me through the contact form or by email, I process the data you provide — name, email address and your message — solely to handle your enquiry and any follow-up questions arising from it.

The legal basis is Art. 6 (1) (b) GDPR for pre-contractual enquiries and Art. 6 (1) (f) GDPR otherwise. No email delivery service is currently connected: your details are only written to the log of the server named above and read by me there. There is no transfer to third parties and no transfer to a third country.

Enquiries are deleted once they are resolved and no statutory retention obligations apply — at the latest after two years.

4. Cookieless analytics

For analytics I run a self-hosted Umami instance. Umami sets no cookies, issues no cross-device identifiers and builds no personal profiles. Only aggregated information is recorded, such as page viewed, referrer, approximate region, device type and browser. The IP address is not stored.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a data-minimising analysis of website usage). Since no information is stored on or read from your device, no consent under Section 25 (1) TDDDG is required.

5. No cookies, no third-party services in page content

This website sets no cookies. Fonts are served from my own server rather than a third-party provider. No maps, videos, social media plugins or advertising networks are embedded.

6. Links to external sites

This website links to external sites, including client projects, GitHub and LinkedIn. I have no influence over their data processing. Data is transmitted to those providers only once you actively follow the respective link.

7. Your rights

Under the GDPR you have the right at any time to

• access the data stored about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interest (Art. 21).

An informal message to schweizerlemail@gmail.com is enough. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR); the competent authority for me is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht).

8. Changes to this policy

I update this policy when the processing changes — for instance when the hosting provider changes or new features are added. The date of the last review appears at the end of this page.