Privacy policy

Controller

The person responsible for processing personal data in connection with this website is:

Hosting and delivery

This website uses Cloudflare Pages. Cloudflare processes connection and request data to deliver pages and protect its network. This can include your IP address, requested URL, request time, browser and operating-system information, referrer information and security-related events.

The purpose is to make the website available, maintain reliable operation and prevent abuse. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in delivering and securing this website. Network information is technically necessary to deliver the requested page; without it, the website cannot be provided to your browser.

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and its service providers may process this information. Processing can take place outside the European Economic Area. Cloudflare describes its data-transfer safeguards, including standard contractual clauses where applicable, in its Data Processing Addendum. Further information is available in Cloudflare’s privacy policy.

Technical data is processed for delivery, operational troubleshooting and security. Retention depends on the applicable Cloudflare service, the security purpose and the account’s logging configuration. This website does not maintain a separate visitor database.

Website features and storage

The website’s application code does not set cookies or store information in localStorage. It does not include advertising, analytics scripts, social-media embeds, external font services, user accounts, comments or contact forms. Images and other page assets are delivered with the website through its hosting provider.

Article searches and filters run in your browser. Search terms are not submitted to a search server. If you use a code-copy button, the selected code is written to your clipboard after you click it. The website does not read your clipboard.

Contact by email

If you email the contact address, your email address, message, any attachments and associated email metadata are processed to read and respond to your enquiry. The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in responding to correspondence. The contact mailbox is a shared mailbox hosted in Microsoft 365 using Exchange Online. Only the website operator has access to this mailbox. Microsoft processes message content, attachments and email metadata to provide mail delivery, storage and service security.

Microsoft’s processing terms are set out in the Microsoft Products and Services Data Protection Addendum. The Exchange Online tenant used for this contact mailbox is configured to store mailbox content at rest in Germany. Messages are not forwarded to a mailbox outside this Microsoft 365 tenant. Microsoft explains these commitments in its Exchange Online data residency documentation. Data residency for stored mailbox content does not mean that all processing is restricted to that location; international processing is subject to the applicable contractual safeguards.

Please send only information needed for your enquiry. I delete enquiry emails once I have finished handling them, and no later than three months after receipt. Replies I send are deleted once the enquiry is completed, and no later than three months after they were sent. If a legal obligation or a legal claim requires further retention, the relevant correspondence is retained for that purpose and deleted when that requirement ends. Providing information by email is voluntary.

Deletion from the mailbox does not necessarily mean immediate permanent erasure from Microsoft’s systems. Deleted messages can remain recoverable for a further period under the applicable Exchange Online recovery settings. Retention policies or legal holds can also delay permanent erasure.

External websites

GitHub and Reddit are linked, not embedded. Following an external link takes you to that provider, where its own privacy policy applies. The links do not load those providers’ content into this website.

Your rights

Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15–20. You can contact the controller above to exercise your rights.

Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. Processing must then stop unless there are compelling legitimate grounds that override your interests, rights and freedoms, or processing is needed for legal claims.

You may complain to a data protection supervisory authority under Article 77 GDPR, particularly in the country of your habitual residence, workplace or the alleged infringement. The supervisory authority for North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).

Automated decisions

The website does not make decisions producing legal or similarly significant effects about you through automated decision-making within the meaning of Article 22 GDPR.