Privacy Policy

Information pursuant to Art. 13, 14 GDPR

1. Controller

2. General information

This website is intentionally minimal. No analytics or marketing cookies are set, no third-party web fonts are embedded, no tracking pixels are used, and no social media plugins are loaded.

3. Access data and server logs

When you access this website, technical access data are processed by the services in use, as is common for every web server and content delivery network:

• IP address (truncated where feasible)
• Date and time of the request
• Requested URL and HTTP status code
• Referrer URL, if transmitted
• User agent (browser, operating system)

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in the secure and stable operation of the website and the prevention of attacks. Retention: Log data are deleted as soon as they are no longer required for the purpose of collection, at the latest after 30 days.

4. Hosting and content delivery network (Cloudflare)

This website is delivered from a private machine through an encrypted tunnel. Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) is placed upstream as a content delivery network, reverse proxy and DDoS protection. When the site is accessed, connection data (in particular the IP address) are processed by Cloudflare.

Legal basis: Art. 6 (1) (f) GDPR (secure operation). A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Transfers to third countries (USA) are based on the EU Standard Contractual Clauses (Art. 46 GDPR). More information: cloudflare.com/privacypolicy/.

5. Essential session cookies in non-public areas

Cloudflare Access (Zero Trust) is used for non-public, internal areas of this domain. After successful authentication, an essential session cookie (CF_Authorization) is set. This cookie is used exclusively for the access-restricted areas. No cookies are set when visiting the public pages (home, legal notice, privacy policy, accessibility statement).

Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary cookie) in conjunction with Art. 6 (1) (f) GDPR.

6. Contact via email

If you contact me by email, the data you provide (email address, name, message content) will be processed to handle your request. Legal basis: Art. 6 (1) (b) GDPR to the extent that the contact serves to initiate or perform a contract; otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding). Retention: Data are deleted as soon as they are no longer required for the purpose and no statutory retention periods apply.

7. External links

This website contains links to external websites (in particular LinkedIn). Merely visiting this site does not transmit any data to the linked providers. Only when you click an external link are you redirected to the respective page, at which point personal data (e.g. your IP address) may be transmitted to the external provider. The respective provider is responsible for the data processing on those external sites.

8. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal email to dgerl@protonmail.com is sufficient. The competent supervisory authority for the controller's place of residence is the Data Protection Commissioner of North Rhine-Westphalia (LDI NRW).

9. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Changes to this policy

This privacy policy is currently in force. Changes to this website or to legal requirements may make it necessary to adapt this policy. The current version is always available on this page.

Last updated: April 2026