Privacy Policy

The controller for the processing of personal data on this website is:

Email: me@stefanostermann.de

This website runs on a server I administer myself. The infrastructure is provided by netcup GmbH in Karlsruhe, Germany. There is no content delivery network and no other external service involved in delivering these pages.

Every request adds one line to the web server's log file. It records the IP address of the requesting device, the date and time of the request, the address requested, the HTTP status code, the number of bytes transferred, and the referrer and browser identification your browser sends.

This processing is necessary to deliver the pages, detect faults and defend against attacks. The legal basis is my legitimate interest in operating the site securely and reliably, Art. 6(1)(f) GDPR.

Log files are deleted after seven days. They are not analysed to recognise individual people, not combined with any other data, and not passed on to third parties. Where an entry is needed to investigate a specific attack, it is kept until that incident is resolved.

If you write to me, I process your email address and whatever you choose to put in your message for the sole purpose of answering your enquiry.

The legal basis is Art. 6(1)(b) GDPR where the exchange concerns entering into or performing a contract, and otherwise my legitimate interest in answering enquiries, Art. 6(1)(f) GDPR.

I delete correspondence once it is settled and no retention obligation stands in the way. German commercial and tax law require business correspondence to be kept for six and ten years respectively.

The form on the contact page sends me your name, your email address and your message. I use them for one thing: answering your enquiry (Art. 6(1)(b) GDPR, and Art. 6(1)(f) for keeping the form free of automated abuse). The message is delivered over an authenticated, encrypted connection into a mailbox I control — no form service, no analytics provider and no captcha service is involved, and nothing is stored in a database. To stop the form being used to send bulk mail, the server keeps a one-way hash of your IP address together with a timestamp for one hour and then deletes it; the address itself is never written down. I keep the message itself for as long as it takes to deal with your enquiry and any work that follows from it.

This website sets no cookies, embeds no analytics or advertising services, and loads no fonts, scripts or images from anyone else's servers. There is nothing here that could follow your visit beyond this site.

Two things are stored locally in your browser: your choice of language and appearance, once you make it, and a note that the pointer to the other language version has already been shown. Both stay on your device, are never transmitted to me, and are necessary for the service you asked for (§ 25(2) no. 2 TDDDG). You can delete them at any time through your browser settings.