Privacy Policy

This privacy policy explains which personal data is processed when you visit this website, for what purpose and on what legal basis. This website is a private, non-commercial site. It does not use any analytics or tracking tools, advertising, or cookies that would require your consent.

1. Controller

Stephan de Haar
Albrechtstr. 10c
10117 Berlin
Germany
Phone: +49 178 1 85 85 36
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

No data protection officer has been appointed for this private website, nor is one required.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with IONOS.

Each time you access the website, your browser automatically transmits data that is stored in server log files: IP address, date and time of access, page requested, the previously visited page (referrer), browser type and version, and operating system. This data is technically required to deliver the website and to ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is the secure and error-free operation of the website. The log files are deleted after seven days at the latest, unless they are needed to investigate a security incident.

3. Protection against attacks

To protect the website against hacking attempts, I use a firewall extension that blocks suspicious requests. For blocked attacks, the IP address, time and requested address are logged. Processing takes place on the website's own server; no data is passed on to third parties. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is the security of the website. The entries are deleted regularly.

4. Cookies

This website only sets one technically necessary cookie: the session cookie of the content management system Joomla. It contains a random identifier, enables for example the secure submission of the contact form, and is deleted when you close your browser. YouTube cookies can only be set once you actively start a video (see section 6).

Storing this cookie is permitted without consent under Section 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) because it is strictly necessary to provide the page you requested. The legal basis for the associated data processing is Art. 6 (1) (f) GDPR. You can delete or block cookies in your browser at any time; some functions, such as the contact form, may then not work.

5. Contact form, email and phone

If you contact me via the contact form, by email or by phone, I process your details (for the form: name, email address, subject and message) in order to answer your enquiry. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is answering your enquiry. If your enquiry relates to a contract, the legal basis is Art. 6 (1) (b) GDPR.

Messages sent via the contact form are forwarded by email to my mailbox with the Gmail service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and stored there. A transfer to Google LLC in the USA cannot be ruled out. Such a transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Google is certified.

I delete your details as soon as your enquiry has been dealt with and no statutory retention obligations apply.

6. Fonts, content and YouTube videos

Fonts, icons and images on this website are loaded exclusively from the website's own server. No fonts are loaded from Google Fonts or other font services.

Some pages contain embedded videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use a two-click solution in privacy-enhanced mode (youtube-nocookie.com): when you open the page, only a placeholder from our own server is shown and no connection to YouTube is established. The video is only loaded from YouTube once you click "Play video". In that case, in particular your IP address, the date and time, the page visited and technical information about your browser are transmitted to YouTube. YouTube may also store or read information on your device (e.g. cookies or local storage) and may process the data in the USA.

The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Your consent is not stored and only applies to the respective video for the current page view; the placeholder appears again the next time you visit. You can withdraw your consent at any time with effect for the future by not starting any further videos and deleting YouTube cookies in your browser. For transfers to the USA, Google is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Further information can be found in Google's privacy policy.

7. Encryption

This website uses TLS encryption (recognisable by "https://" in the address bar). Data you transmit via the website cannot be read by third parties.

8. Your rights

You have the right at any time to

  • access the data stored about you (Art. 15 GDPR),
  • have incorrect data rectified (Art. 16 GDPR),
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

To exercise these rights, an informal message to the contact details above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for this website is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
www.datenschutz-berlin.de

No automated decision-making, including profiling, takes place.

Last updated: November 2026