Privacy

Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

In short

This website sets no cookies, contains no tracking script and loads nothing from third-party servers. Fonts and images come from the same server as the page. There is no form and no user account; contact works by email only.

There is no automated decision-making and no profiling.

When you open the page

When you open the page, your browser sends information without which it cannot be delivered: IP address, date and time, the requested address, the previously visited page (referrer) and the browser identifier.

The page is hosted by Netlify. Cloudflare sits in front of it: it encrypts the connection, fends off attacks, caches content and builds aggregated traffic statistics from the requests, such as the number of visits and countries of origin. No script runs in your browser for this. I do not analyse any logs containing IP addresses myself.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest: delivering the page securely and reliably and seeing how often it is visited. How long the providers keep their logs is governed by their own terms.

Cloudflare, Inc.

101 Townsend St., San Francisco, CA 94107, USA

Data may be transferred to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Netlify, Inc.

101 2nd Street, San Francisco, CA 94105, USA

Data may be transferred to the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

When you write to me

If you send me an email, I process your address, the content and the timestamps of the message in order to reply. Writing is up to you; without a sender address I cannot reply. Cloudflare (Email Routing) receives mail sent to the contact address and forwards it to my mailbox at goneo.

The legal basis is Art. 6(1)(b) GDPR if your request concerns working together, otherwise Art. 6(1)(f) GDPR with the legitimate interest of answering messages. I delete the message once your matter is settled, unless statutory retention obligations require longer storage.

Cloudflare, Inc.

101 Townsend St., San Francisco, CA 94107, USA

Data may be transferred to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

goneo Internet GmbH

Dresdener Straße 18, 32423 Minden, Germany

Provider’s privacy policy

Links to other sites

Links to the App Store, to GitHub and to individual project sites are ordinary links. Only when you click one does your browser connect to the destination; its provider’s privacy policy applies there.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.