Your data.
Your choice.

Last updated: 9 October 2026.

Controller

When reading

This website serves its own fonts and images. Its own scripts do not set cookies, store information persistently in your browser or load tracking services. Requests transmit connection data needed to deliver the website to the hosting provider. The optional music player and any restricted-access pages are explained below.

Hosting

The website is delivered through Cloudflare Workers with Static Assets. The recipient is Cloudflare, Inc., United States. Processing includes IP addresses, request dates and times, requested URLs, browser and device information, and technical connection and security data. These data support page delivery, reliability and abuse prevention. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is to provide a secure and reliable website. No Cloudflare Web Analytics script is embedded.

The website has no visitor database of its own and no access-log export configured in its code. Cloudflare processes operational and security data. Retention depends on the purpose, including service provision, investigation of security events and legal obligations. This notice does not promise a single fixed deletion period for all Cloudflare data. Cloudflare’s privacy policy describes its processing in more detail.

Cloudflare operates a global network; processing outside the European Economic Area, including in the United States, is possible. Cloudflare describes processing on customers’ behalf and safeguards for international transfers, including EU Standard Contractual Clauses, in its Data Processing Addendum (DPA). The terms and safeguards are available here: Cloudflare DPA · Cloudflare Privacy Policy

Restricted access

Where a page is protected by Cloudflare Access, login identifiers, access decisions and technical authentication data are also processed. Necessary session cookies may be used for authentication. The purpose is to restrict access to authorised people, based on Article 6(1)(f) GDPR and, for necessary access to your device, section 25(2)(2) of the German TDDDG. Without the necessary authentication data, restricted pages cannot be accessed. This does not subscribe you to a newsletter.

Reach and external links

There is no analytics service of our own, no advertising pixel and no embedded social-media feed. Search and topic filters run in your browser; search terms are not sent to a search provider. RSS is available without registration. Opening an external link connects you to the destination website; its provider is responsible for processing there.

Music through SoundCloud

“Play music” first opens a privacy notice. Only your explicit consent in that dialog loads the SoundCloud player and its widget interface. SoundCloud then receives information including your IP address and browser details and may load cookies or further resources. You can read the entire website without music. This optional integration is based on your consent under Article 6(1)(a) GDPR and, where required, section 25(1) of the German TDDDG.

The provider is SoundCloud Global Limited & Co. KG, Berlin. Once loaded, SoundCloud may process playback and usage data and associate them with your SoundCloud account if you are signed in. SoundCloud determines further processing within its service under its own privacy policy; processing outside the EEA is possible. SoundCloud identifies safeguards including EU Standard Contractual Clauses. According to the provider, retention depends on service use, any account relationship and legal obligations. Its policy provides further recipient details, safeguards and contact options. SoundCloud requires users in the EEA to be at least 16.

SoundCloud also describes cookies and similar technologies for usage analytics and personalised advertising, including third-party technologies. This possible processing forms part of the optional music integration; SoundCloud is not loaded when you read without consenting. Details and choices are described in the SoundCloud cookie policy.

Use “Music off” at any time to end the integration for the future. This reloads the page to unload the SoundCloud interface as well. Consent exists only in this tab’s working memory. In supported browsers, the player continues across internal page and language changes. Leaving or fully reloading ends the player. When a track ends, the next track in the existing selection plays automatically. You can turn this continuation off in the player. A new tab starts without SoundCloud. This does not delete cookies already set by SoundCloud. Further information is available in the SoundCloud privacy policy.

When you write

If you email me, I process your sender and contact details, message content, any attachments and technical delivery data to respond to your enquiry. General enquiries are based on Article 6(1)(f) GDPR; my legitimate interest is to communicate with interested people and deal with their requests. Where processing is necessary for a contract with you or for pre-contractual steps at your request, it is based on Article 6(1)(b) GDPR. Please send only information necessary for your request. Contacting me does not subscribe you to a newsletter.

The mailbox uses Microsoft 365 / Exchange Online; the service-provider recipient is Microsoft Ireland Operations Limited. Germany is listed as the current and committed location for Exchange Online mailbox data at rest. This does not exclude international support or operational access. Microsoft describes processing on customers’ behalf and international transfers, including EU Standard Contractual Clauses, in the Microsoft Products and Services Data Protection Addendum: Microsoft DPA

I retain general contact enquiries only as long as needed to handle them or for another specific purpose. I review completed enquiries monthly and delete them once no further purpose remains. Messages subject to statutory retention duties or needed for specific legal claims are retained for the applicable period. An additional automatic mailbox rule deletes content older than seven years; it does not require minimum retention and does not replace this purpose-based review. Please contact me if you request earlier deletion; your request will be assessed against the legal requirements.

Newsletter and support

Newsletter registration and payment processing are not currently enabled. Before these features are launched, I will add information about providers, purposes, legal bases, retention and your choices.

Your rights

Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time for the future; this does not affect the lawfulness of processing before withdrawal. Please use the contact address above for requests. You may also contact SoundCloud’s privacy team about its processing.

Your right to object

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). I will stop that processing unless overriding compelling legitimate grounds apply or the processing is needed for the establishment, exercise or defence of legal claims.

You may complain to a data protection supervisory authority, particularly where you normally live or work or where you believe an infringement occurred. The authority for my place of business in Berlin is: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

You are not required to send a message or enable music. The website cannot be delivered without the necessary connection data; I may be unable to respond to a message without suitable contact details. I do not use your data here for automated decision-making, including profiling, within the meaning of Article 22 GDPR.