Privacy policy
This English translation is provided for convenience. The German version (Datenschutzerklärung) is the legally binding one.
1. Privacy at a glance
The following notes provide a simple overview of what happens to your personal data when you visit this website. This website is a statically generated site with no user accounts and no tracking cookies. You only transmit personal data if you use the contact form.
Controller
Boaz Lichtenstein
Kirschstr. 14
80999 München
Email: [email protected]
2. Hosting (Cloudflare Pages)
This website is hosted on Cloudflare Pages (provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access the website, Cloudflare processes technically necessary connection data (e.g. IP address, date and time of access, page requested) to deliver the website and protect it against attacks. The legal basis is our legitimate interest in a secure and performant provision of the website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is part of Cloudflare's terms of service.
3. Contact form
If you use the contact form at /en/contact, we process the data you enter (name, email address and, where applicable, subject and message) solely to process and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise our legitimate interest in responding to enquiries addressed to us (Art. 6(1)(f) GDPR). The message is delivered as an email to our inbox and deleted there once your enquiry has been fully processed and no statutory retention obligations apply.
Spam protection: Cloudflare Turnstile
To protect the form against spam and misuse, we use Cloudflare Turnstile (provider: Cloudflare, Inc.). Turnstile checks whether a request originates from a human and, in doing so, processes technical connection and interaction data. The legal basis is our legitimate interest in protecting the website against misuse (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.
Email delivery: Resend
For the technical delivery of the form message, we use the delivery service Resend (provider: Resend, Inc., USA) as a processor. Resend processes the form data solely to deliver the email to our inbox. Transfer to the USA takes place on the basis of EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework; a data processing agreement is part of Resend's terms of service.
4. Newsletter
For the newsletter we process your first and last name (for personal salutation), your email address and the time of your signup and confirmation. Signup uses a double-opt-in procedure: you first receive a confirmation email, and only after clicking the link it contains are you added to the recipient list. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every issue or by contacting us. Your data is stored until you unsubscribe and is then removed from the recipient list. Sending and recipient management run through our processor Resend (see above). The signup form is protected against abuse by Cloudflare Turnstile (see above).
5. Cloudflare Web Analytics (cookie-free analytics)
We use Cloudflare Web Analytics, a cookie-free and data-sparing measurement of website usage. No cookies are set, no persistent identifiers are used, and no personal profiles are created. The legal basis is our legitimate interest in the statistical evaluation of website usage (Art. 6(1)(f) GDPR).
6. Cookies and local storage
This website does not set any tracking cookies. Your browser's local storage (localStorage) is used exclusively to store technically necessary settings: your display preference (light/dark theme) and your decision on the cookie notice. This data remains in your browser and is not transmitted to us.
7. Web fonts (self-hosted)
This website uses the Inter typeface, which is hosted locally on our server. No connection is made to third-party servers (e.g. Google Fonts).
8. Your rights
Under the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as a right to rectification, restriction or erasure of this data (Art. 15–18 GDPR), to data portability (Art. 20 GDPR), and a right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).
9. SSL/TLS encryption
For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the padlock icon in your browser's address bar and by the fact that the address bar switches from “http://” to “https://”.