Privacy notice

Last updated: 21 September 2026

Controller

Website and hosting

This website is hosted by ORICOM InternetServiceProvider, owner Olaf Richter, Schrobsdorffstr. 5, 12623 Berlin, Germany. According to the hosting provider, data is stored exclusively on its systems in Germany. The hosting provider acts as a technical service provider for me.

When you visit the website, the server processes the connection data of the requesting device (which normally includes the IP address), the pages requested, the date and duration of the visit, and the identifier of the browser and operating system type used. This information is needed to deliver the website, keep it operating reliably and detect technical problems or attacks. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is providing a secure and reliable website.

The hosting provider stores this log data in server log files only temporarily, for as long as it is needed for secure operation and troubleshooting, and then deletes it. If a specific security incident occurs, the relevant data is retained until the incident has been investigated. Where necessary to establish or defend legal claims, it is retained until those claims are finally resolved or can no longer be pursued.

This website uses no cookies, tracking or embedded third-party content. Fonts and images are served locally. The transmission technically necessary to provide this website does not require consent under section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Contact by email or phone

When you contact me, I process the information you provide, such as your name, email address, phone number, message and attachments, together with any necessary notes of our conversation. The links open your email or phone application; the website itself does not send a message.

If your enquiry concerns or prepares a contract with you personally, the legal basis is Article 6(1)(b) GDPR. For other enquiries, including those from people acting for a company, the legal basis is Article 6(1)(f) GDPR: my legitimate interest in answering business enquiries and coordinating our work together.

I use GMX (1&1 Mail & Media GmbH, Brauerstr. 48, 76135 Karlsruhe, Germany) for email and my mobile network operator for telephone services. These providers receive the information necessary for their respective services.

Ordinary contact enquiries are deleted no later than six months after the matter has been concluded, unless they are required for continuing cooperation, statutory retention or specific legal claims. Business correspondence subject to statutory retention is generally kept for six years and accounting records for eight years, counted from the end of the relevant calendar year; statutory extensions may apply. The legal basis for mandatory retention is Article 6(1)(c) GDPR together with section 147 of the German Fiscal Code (Abgabenordnung). Data required for specific legal claims is retained on the basis of my legitimate interest under Article 6(1)(f) GDPR until the claims are finally resolved or can no longer be pursued.

Providing contact information is voluntary. Without the information needed for your enquiry, I may be unable to reply or prepare a proposal. Technical request data is necessary to deliver the website. I do not use automated decision-making under Article 22 GDPR or profiling for the purposes described here.

Transfers outside the EU/EEA

I do not arrange for the data described here to be transferred to countries outside the EU/EEA. According to the hosting provider, data is stored exclusively on systems in Germany.

Your rights

Subject to the applicable legal conditions, you can request access, rectification, erasure and restriction of processing. Where data is processed by automated means on the basis of a contract or consent, you also have the right to data portability under the conditions in Article 20 GDPR. Please use the controller contact details above to exercise your rights.

Right to object to processing based on legitimate interests

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. I will stop that processing unless I can demonstrate overriding compelling legitimate grounds or the processing is needed to establish, exercise or defend legal claims.

Complaints

You may lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the alleged infringement. The authority responsible for me is the State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany; contact: poststelle@lfd.niedersachsen.de, phone +49 511 120-4500, www.lfd.niedersachsen.de.