Privacy Policy

Information pursuant to Art. 13, 14 GDPR

1. Controller

2. General information

This website is intentionally minimal. No analytics or marketing cookies are set, no third-party web fonts are embedded, no tracking pixels are used, and no social media plugins are loaded.

3. Access data and server logs

When you access this website, technical access data are processed by the services in use, as is common for every web server and content delivery network:

• IP address
• Date and time of the request
• Requested URL and HTTP status code
• Referrer URL, if transmitted
• User agent (browser, operating system)

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in the secure and stable operation of the website and the prevention of attacks. Retention: Log data are deleted as soon as they are no longer required for the purpose of collection, at the latest after 14 days.

4. Hosting

This website is operated on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in a data centre located in Germany. When the site is accessed, the access data listed under section 3 are processed on that server. No content delivery network, reverse proxy or other upstream service is used.

Legal basis: Art. 6 (1) (f) GDPR (secure and stable operation). A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner Online GmbH. No personal data are transferred to third countries. More information: hetzner.com/legal/privacy-policy/.

5. Essential session cookies in non-public areas

The non-public, internal areas of this domain (path /privat/) are password-protected. After successful authentication, an essential session cookie (examen_session) is set there, serving solely to maintain the login. No cookies are set when visiting the public pages (home, vita, publications, legal notice, privacy policy, accessibility statement).

Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary cookie) in conjunction with Art. 6 (1) (f) GDPR.

6. Contact via email

If you contact me by email, the data you provide (email address, name, message content) will be processed to handle your request. Legal basis: Art. 6 (1) (b) GDPR to the extent that the contact serves to initiate or perform a contract; otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding). Retention: Data are deleted as soon as they are no longer required for the purpose and no statutory retention periods apply.

7. External links

This website contains links to external websites (in particular LinkedIn). Merely visiting this site does not transmit any data to the linked providers. Only when you click an external link are you redirected to the respective page, at which point personal data (e.g. your IP address) may be transmitted to the external provider. The respective provider is responsible for the data processing on those external sites.

8. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal email to dgerl@protonmail.com is sufficient. The competent supervisory authority for the controller's place of residence is the Data Protection Commissioner of North Rhine-Westphalia (LDI NRW).

9. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Changes to this policy

This privacy policy is currently in force. Changes to this website or to legal requirements may make it necessary to adapt this policy. The current version is always available on this page.

Last updated: August 2026