Privacy notice

In this privacy notice, I would like to explain what types of your personal data (also referred to below simply as ‘data’) I process, for what purposes and to what extent.

This privacy notice applies to all processing of personal data that I carry out in connection with this website and on external online presences, such as my social media profiles (collectively referred to below as my ‘online offering’).

Controller

𝖿𝗋𝗈𝗍𝗍𝗂𝖶 𝗇𝗂𝗆𝖺𝗃𝗇𝖾𝖡
𝗆𝗎𝗌𝗌𝖾𝗋𝗉𝗆𝖨-𝗇𝗂𝖾𝖣 𝖾𝖼𝗂𝗏𝗋𝖾𝗌𝗆𝗎𝗌𝗌𝖾𝗋𝗉𝗆𝖨 𝗈/𝖼
𝟣𝟦 .𝗋𝗍𝖲 𝗋𝖾𝗇𝗂𝗍𝗍𝖾𝗍𝖲
𝗇𝖾𝗀𝗇𝗎𝖧 𝟢𝟣𝟦𝟧𝟥
𝗒𝗇𝖺𝗆𝗋𝖾𝖦

Email Ben.
Read the legal notice.

Overview of processing

The following overview summarises the types of data processed and the purposes of their processing, and identifies the people concerned.

Types of data processed

  • Master data
  • Contact data
  • Content data
  • Usage data (purely technical)
  • Metadata, communications data and procedural data

Categories of data subjects

  • Communication partners
  • Users

Purposes of processing

  • Contact enquiries and communication
  • Security measures
  • Content delivery network (CDN)
  • Provision of my online offering and user-friendliness
  • Web analytics and optimisation
  • Information technology infrastructure

Applicable legal bases

Below is an overview of the legal bases under the GDPR on which I process personal data.

  • Consent (Art. 6(1), first sentence, point (a) GDPR) – The data subject has given consent to the processing of their personal data for a specific purpose or several specified purposes.
  • Legitimate interests (Art. 6(1), first sentence, point (f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

In addition to the data protection provisions of the GDPR, national data protection provisions in Germany apply (Federal Data Protection Act – BDSG).

Security measures

In accordance with legal requirements, I take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access permissions, data input and disclosure, the safeguarding of availability and the separation of data.

TLS encryption (https): To protect the data you transmit through my online offering, I use TLS encryption. You can recognise connections encrypted in this way by the prefix ‘https://’ in your browser’s address bar.

Erasure of data

The data I process are erased in accordance with legal requirements as soon as the consent permitting their processing is withdrawn or other permissions cease to apply (for example, if the purpose of processing the data no longer applies or the data are not necessary for that purpose).

Provision of the online offering and web hosting

I process users’ data in order to provide them with my online services. For this purpose, I process users’ IP addresses, which are necessary to transmit the content and functions of my online services to users’ browsers or devices.

  • Types of data processed: Usage data (name of the web page or file accessed, date and time of access); metadata, communications data and procedural data (e.g. IP addresses, timestamps, browser information); content data (e.g. entries in online forms).
  • Data subjects: Users (e.g. website visitors).
  • Purposes of processing: Provision of my online offering and user-friendliness; information technology infrastructure (operation and provision of information systems and technical equipment); security measures; content delivery network (CDN).
  • Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).

Further information on processing activities, procedures and services

  • Provision of the online offering on own/dedicated server hardware: To provide my online offering, I use server hardware that I rent, together with the associated storage space, computing capacity and software; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).
  • Collection of access data and log files: Access to my online offering is recorded in what are known as ‘server log files’. Server log files may include the addresses and names of the web pages and files accessed, the date and time of access, the volumes of data transferred, notification of successful access, the browser type and version, the users’ operating system, the referrer URL (the page previously visited, if transmitted by the browser) and, as a rule, IP addresses and the requesting provider. The server log files are used for security purposes; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR); Erasure of data: Log file information is stored for a maximum of 7 days and then erased.
  • Email sending and hosting: The web hosting services I use also include sending, receiving and storing emails. For these purposes, the addresses of recipients and senders, other information concerning email transmission (e.g. the providers involved) and the contents of the respective emails are processed. Emails are generally encrypted in transit, but are usually stored unencrypted on the servers; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).
  • Content delivery network: I use a ‘content delivery network’ (CDN). A CDN is a service that enables the content of an online offering, particularly large media files such as graphics or program scripts, to be delivered more quickly and securely using geographically distributed servers connected via the internet; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).
  • netcup: Services relating to the provision of information technology infrastructure and associated services (e.g. storage space and/or computing capacity); Service provider: netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR); Website: https://www.netcup.com/de; Privacy policy: https://www.netcup.com/de/kontakt/datenschutzerklaerung; Data processing agreement: https://www.netcup.com/de/helpcenter/dokumentation/general/avv.
  • CloudFlare: Content delivery network (CDN); Service provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR); Website: https://www.cloudflare.com; Privacy policy: https://www.cloudflare.com/privacypolicy/.

Contact and enquiry management

When you contact me (e.g. by email or by sending me comments on blog articles by email), the information provided by the people making enquiries is processed to the extent necessary to respond to the contact enquiries and any measures requested.

  • Types of data processed: Contact data (e.g. email); content data (e.g. the content of the email/comment); metadata, communications data and procedural data (e.g. IP addresses at the mail server, timestamps).
  • Data subjects: Communication partners.
  • Purposes of processing: Contact enquiries and communication; managing and responding to enquiries.
  • Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).

Newsletters and electronic notifications

I send newsletters, emails and other electronic notifications (referred to below as ‘newsletters’) only with the recipients’ consent or where permitted by law. The newsletter is sent through my own server infrastructure; no data are passed on to external marketing platforms.

Double opt-in procedure: Registration for my newsletter generally uses what is known as a double opt-in procedure. This means that after registering, you receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with someone else’s email address. Newsletter registrations are logged so that the registration process can be documented in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address.

Erasure and restriction of processing: On the basis of my legitimate interests, I may retain email addresses that have been unsubscribed for up to three years before erasing them, in order to demonstrate that consent was previously given. The processing of these data is restricted to the purpose of potentially defending against claims. An individual request for erasure is possible at any time, provided that the previous existence of consent is confirmed at the same time.

  • Types of data processed: Master data (e.g. names, if provided); contact data (email); metadata, communications data and procedural data (e.g. IP addresses, timestamps, opt-in status).
  • Data subjects: Communication partners.
  • Purposes of processing: Direct marketing (by email).
  • Legal bases: Consent (Art. 6(1), first sentence, point (a) GDPR).
  • Right to object (opt-out): You can unsubscribe from my newsletter at any time, i.e. withdraw your consent or object to receiving it in future. You will find an unsubscribe link at the end of each newsletter, or you can use one of the contact options (email) given above.

Web analytics and optimisation

I use the web analytics tool Umami to analyse visitor traffic on my online offering. The data are processed exclusively on the same server and are not passed on to third parties. No cookies are set and no personal profiles are created. Data collection is anonymised.

  • Types of data processed: Usage data (e.g. web pages visited, interest in content, access times); metadata, communications data and procedural data (e.g. IP addresses, timestamps, browser information, device information).
  • Data subjects: Users (e.g. website visitors).
  • Purposes of processing: Audience measurement (e.g. access statistics, recognition of returning visitors); provision of my online offering and user-friendliness.
  • Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).

Presences on social networks (social media)

I maintain online presences on social networks and, in this context, process users’ data in order to communicate with users active there or to provide information about myself.

Please note that users’ data may be processed outside the European Union in this context. This may create risks for users because, for example, it could make it more difficult for them to enforce their rights.

For a detailed description of the respective forms of processing and the options for objecting (opting out), I refer you to the privacy policies and information provided by the operators of the respective networks.

  • Types of data processed: Contact data (e.g. email); content data (e.g. messages); usage data (technical usage data from the platforms).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Contact enquiries and communication.
  • Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR).

Further information on processing activities, procedures and services

  • Discord: Social network; Service provider: Discord Netherlands BV, ATTN: Privacy Policy, Schiphol Boulevard 195 1118BG, Schiphol, Amsterdam, the Netherlands, Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR); Website: https://www.discord.com; Privacy policy: https://discord.com/privacy.
  • LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6(1), first sentence, point (f) GDPR); Website: https://www.linkedin.com; Privacy policy: https://de.linkedin.com/legal/privacy-policy.

Changes and updates to this privacy notice

Please review the content of my privacy notice regularly. I update the privacy notice whenever changes to the data processing I carry out make this necessary.

Rights of data subjects

As a data subject, you have various rights under the GDPR, arising in particular from Articles 15 to 21 GDPR:

  • Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1), point (e) or (f) GDPR.
  • Right to withdraw consent: You have the right to withdraw consent you have given at any time.
  • Right of access: You have the right to request confirmation as to whether data concerning you are being processed, and to obtain access to those data, further information and a copy of the data in accordance with legal requirements.
  • Right to rectification: In accordance with legal requirements, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
  • Right to erasure and restriction of processing: In accordance with legal requirements, you have the right to request that data concerning you be erased without undue delay or, alternatively, to request restriction of the processing of the data in accordance with legal requirements.
  • Right to data portability: In accordance with legal requirements, you have the right to receive data concerning you that you have provided to me in a structured, commonly used and machine-readable format, or to request that they be transmitted to another controller.
  • Complaint to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority.

Updated: 2026.11.