Privacy Policy

This English version is provided for convenience. The legally binding version is the German privacy policy available at geimer.tech/privacy.

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:

Andre Geimer
Volhardstraße 12
66424 Homburg
Germany
E-mail: andre@geimer.tech

2. General information on data processing

This website processes personal data only to the extent technically necessary to operate the site and provide its content. No contact forms, newsletters or comparable active data collection mechanisms are operated.

3. Hosting

This website is hosted via Cloudflare Pages, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (hereinafter: "Cloudflare"). Cloudflare operates a global content delivery network (CDN) through which the content of the website is delivered. Your IP address is necessarily transmitted to Cloudflare, as it is technically required to send the content to your browser.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Cloudflare. As Cloudflare is a company based in the USA, personal data may be transferred to a third country. This transfer takes place on the basis of the EU Standard Contractual Clauses (Art. 46 (2) lit. c GDPR). Cloudflare is also certified under the EU-US Data Privacy Framework.

The legal basis for use is Art. 6 (1) lit. f GDPR (legitimate interest in a reliable, fast and secure provision of the website). For more information, see Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/.

4. Server log files

Cloudflare automatically collects and stores information in server log files which your browser automatically transmits. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. The legal basis is Art. 6 (1) lit. f GDPR. Log files are deleted after a short period, unless retention is required in individual cases to preserve evidence in the event of security-relevant incidents.

5. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar switching from "http://" to "https://".

6. Web analytics with Umami

This website uses Umami, a privacy-friendly, cookie-free web analytics service. The provider is Umami Software, Inc. Umami collects only anonymised and aggregated usage data, including:

• pages accessed
• referring page (referrer)
• approximate geographical origin at country level
• browser and operating system used
• device type used (desktop / tablet / mobile)

Umami does not set cookies and does not store IP addresses. No profiling takes place and no personal data is sold to third parties or processed for advertising purposes. The data is processed on Umami servers within the EU.

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest of the operator in a statistical evaluation of reach). Since Umami does not use cookies or comparable end-device identifiers, no consent is required under § 25 (2) No. 2 TTDSG.

For more information, see Umami's privacy policy: https://umami.is/privacy.

7. Fonts (self-hosting)

For the consistent display of fonts, this site uses the "Inter" typeface. The font files are delivered locally from this server. No connection is made to external services (e.g. Google Fonts). IP addresses are not transmitted to third parties.

8. External links

This website contains links to external third-party services, in particular to an online appointment booking tool by Google (Google Calendar) and to LinkedIn. Merely setting a link does not transmit any personal data to these providers. Only when you actively click a link do you leave this website. The privacy policies of the respective provider then apply.

9. Contact by e-mail

If you send me enquiries by e-mail, your details, including the contact data you provide, will be stored by me for the purpose of processing the enquiry and in the event of follow-up questions. I will not pass on this data without your consent.

The legal basis is Art. 6 (1) lit. b GDPR for enquiries in connection with the initiation or performance of a contract, otherwise Art. 6 (1) lit. f GDPR. The data will be deleted as soon as it is no longer required for the purpose of its collection and no statutory retention obligations conflict with this.

10. Your rights as a data subject

You have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Art. 21 GDPR)
• right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, an informal message to the e-mail address above is sufficient.

11. Right to lodge a complaint with the supervisory authority

In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.

12. Validity and changes to this privacy policy

This privacy policy is currently valid and has the status indicated above. Due to the further development of the website or changing legal requirements, it may become necessary to amend this privacy policy. The current version is available at geimer.tech/en/privacy.