Privacy Policy

This is a courtesy English translation. The legally binding version is the German one: Datenschutzerklärung.

Protecting your personal data matters to me. This policy explains which data is processed when you visit this website, for what purpose and on what legal basis. This site is deliberately data-minimal: Google Analytics loads only after your explicit consent.You can use the website without agreeing; in that case, this Analytics integration sends no data to Google. Advertising personalisation features are disabled.

1. Controller

The controller for data processing on this website is:

Name

Martin Linke

Address

Steimke 1b
37170 Uslar
Germany

Email

martin@rdaneel.dev

2. Hosting and server log files

This website is hosted by Cloudflare (the “Cloudflare Pages” service). The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes, on my behalf, the data technically required to deliver the website; the basis is a data processing agreement (Art. 28 GDPR).

When the website is accessed, information transmitted by your browser is processed automatically:

• IP address of the requesting device
• date and time of access
• the file requested or address (URL) accessed
• amount of data transferred and status message
• referrer (the previously visited page, if transmitted)
• browser type and operating system (user agent)

The purpose is the technically error-free delivery as well as the security and stability of the website (in particular defending against attacks and misuse). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional provision). These connection data are processed briefly for security purposes and are usually deleted within a few days. The additional own counter stores no IP addresses or individual visit records from these requests; its aggregate counting is described below. I do not merge connection data with other data sources or identify individual persons.

3. Fonts (self-hosted)

This website uses fonts that are served locally from my own server (self-hosted via Fontsource). When the page loads, no connection to third-party servers (in particular not to Google Fonts) is established, and no font-related data is transmitted to third parties.

3a. Language selection

German is the default. Use the language switch to open the English or German version. The language is determined solely by the page address you open. No language preference is stored in or read from your browser.

3b. Own statistics and privacy settings

To understand use of this website, I count delivered public HTML pages and explicitly selected statistics choices. Only daily totals in German local time are stored: page requests and choices for neither, own only, Google only, or both statistics. There are no records of individual visits, IP addresses in the counter database, or individual identifiers. These totals are not linked to Google Analytics or contact forms.

This basic counting operates before a choice and after declining optional statistics. It sets no cookies and reads no browser identifier. It serves my legitimate interest in a minimal overview of page requests and use of the consent choices under Art. 6(1)(f) GDPR, insofar as personal connection data is processed during the technical operation. Counting runs at the existing host Cloudflare and totals are stored in its D1 database service. The host processes technically necessary connection data, including IP addresses; my counter code does not store that data in the statistics database.

Page requests are not unique visitors: repeated and automated requests may be included. Decisions count explicit choices, not subsequent reads of a saved preference. No choice is not counted as a refusal. Aggregated daily totals without individual visit records are retained for monthly and annual comparisons. Outages can cause missing counts or duplicate counts after a later retry; these figures are not a complete measurement of all people.

Where Cloudflare provides suitable information, I group page requests into verified search crawlers, other verified bots, suspected automated requests, and requests without a detected bot classification. Missing signals and older, unclassified totals are reported separately. Only daily totals for each group are stored, not individual bot scores, browser characteristics, or additional identifiers. This classification does not prove a human visit; undetected automated requests may also be included.

Optional own visitor statistics for up to 24 hours

Only if you allow own visitor statistics does your browser set the cookierdaneel_counted_24h. It holds the same value “1” for every browser, not an individual identifier, and only remembers that this browser has already been counted. It is valid for up to 24 hours from creation; further page views do not extend that period. While it is valid, no additional browser period is counted. After expiry, another visit with continuing consent may start a new period.

The basis for this cookie is your consent under section 25(1) TDDDG and, insofar as personal data is concerned, Art. 6(1)(a) GDPR. The own counter stores only an additional daily total of new 24-hour browser periods, not a browsing history or browser identifier. This does not identify people across devices or count unique visitors per calendar day. If cookies are blocked, this additional counting is skipped.

Saving and changing your choice

“Decline” disables both optional statistics. “Allow” enables both; “Customize” lets you select and save them independently. Both stay disabled without a choice. You can open privacy settings to change or withdraw consent at any time for the future. Declining does not restrict the website. Withdrawal stops future measurement by the respective deselected statistics. Withdrawing own visitor statistics removes its counting cookie. Previously processed anonymous totals can no longer be linked to an individual visit and are not retrospectively changed.

Your settings and their time are stored locally underrdaneel.analytics-consent.v2 and respected for up to 180 days. You are then asked to choose again. When the browser is closed, the expired entry may remain until a later visit. This preference has no individual visitor identifier and is not sent to Google. Storing it serves consent management under section 25(2)(2) TDDDG; the basis for that management is Art. 6(1)(f) GDPR. An explicit choice additionally increments only the daily total described above at the own counter. If preference storage is blocked, the choice applies only to the current document. Without JavaScript, only the server-side basic counting operates.

3c. Google Analytics

With your separately selectable consent I use Google Analytics 4 to analyse page views, website use and successful enquiries. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG for Analytics cookies. Google's data processing terms apply.

The Google script loads only after consent to Google Analytics. Page views, time and duration of use, browser and device details, approximate region, traffic sources and scroll, link, form and video interactions may then be processed. Google also receives technical connection data such as the IP address. Cookies with random identifiers associate visits, so this processing is not generally anonymous. Google Signals and advertising personalisation are disabled.

Names, email addresses, phone numbers and message contents from the contact form are not passed to Analytics. A successful enquiry is measured only after a positive response from the form server. Starting or attempting to submit a form is distinct. Custom page and video events contain no URL query strings or fragments. Sensitive outbound links are reduced to the destination origin or contact method.

Without Google consent, this Analytics integration sends no data to Google. Withdrawal blocks further measurement and removes accessible GA cookies. Previously transmitted data is not retrospectively deleted. GA cookies are limited to 180 days without renewal on further page views. A two-month retention period is intended for user- and event-level details in GA4; aggregated standard reports are independent of this setting. See Google's data retention information.

4. Getting in touch

Contact form

If you use the contact form, I process the data you enter: name, email address, optional subject and message content, as well as any phone number and availability you choose to provide. This information is transmitted TLS-encrypted to my own server hosted in the EU (rented from IONOS SE, Montabaur, Germany) and delivered to me from there by email; dispatch is handled by my email provider mailbox.org (Heinlein Hosting GmbH, Berlin). Your data is not stored on the server itself, and no further service providers are involved.

The purpose is to handle your enquiry and to communicate with you. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry is aimed at concluding or initiating a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

If you open the form through a tagged contact link on the Facebook business Page, the source of that link is included in the email when you submit your enquiry. This lets me associate enquiries with that contact link. No cookies or browser storage are used for this, and neither the full page address nor your browsing path is transmitted.

Contact by email

You can also contact me directly by email. In that case I process your email address and the information transmitted with the message for the purpose of handling your request (legal basis as above).

Voluntary consent to be contacted about offers

In the form you can additionally and voluntarily consent to me storing your email address so I may occasionally send you an individual offer. This processing is based solely on your consent (Art. 6(1)(a) GDPR, § 7 (2) UWG). The corresponding checkbox is not pre-selected. You can withdraw your consent at any time with effect for the future, e.g. by an informal email to martin@rdaneel.dev. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

5. Storage period

• Server log files: brief processing for security purposes, usually deleted within a few days.
• Contact enquiries: until your request has been fully dealt with; afterwards deleted, unless statutory retention obligations apply (as a rule at the latest 6 months after the communication is concluded). If a business relationship arises from the enquiry, the commercial and tax law retention periods apply (6, 8 or 10 years, depending on the document type).
• Email address with consent given (offers): stored until the consent is withdrawn.

6. Transfer to third countries

Using Cloudflare may result in data being processed in the USA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework (DPF); in addition, standard contractual clauses of the EU Commission pursuant to Art. 46(2) GDPR exist with Cloudflare as appropriate safeguards for the transfer. With Analytics consent, Google may also process data in the USA. Google LLC declares certification under the EU-US Data Privacy Framework; standard contractual clauses additionally apply where required. See Google’s transfer frameworks.

7. Your rights

Under the GDPR you have the following rights:

• access to the data processed about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on a legitimate interest (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to martin@rdaneel.dev is sufficient.

8. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority at the controller’s place of residence is in particular responsible:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
Email: poststelle@lfd.niedersachsen.de
Web: lfd.niedersachsen.de

9. Currency and changes

This privacy policy is dated 17 October 2026. As the website develops or legal requirements change, it may become necessary to amend this policy. The current version is always available on this page.