Privacy policy

Data controller

Website hosting

This website is hosted by Railway Corporation. When you visit it, technical connection data, including your IP address and the requested resource, must be processed to deliver the website to your browser.

Hosting logs may also include the time of the request, HTTP status, browser information and the referring page. They support the secure and reliable operation of the website. The legal basis is Article 6(1)(f) of the GDPR; the legitimate interest is the availability and security of this website.

Railway retains logs according to the subscribed plan: currently 7 days on Hobby, 30 days on Pro and up to 90 days on Enterprise. Logs are no longer available after the applicable retention period. Details about plan-specific retention are provided in the Railway documentation.

Railway is a US-based provider. Data may be processed outside the European Economic Area even when a European server region is used. Railway’s data processing terms provide for safeguards including EU Standard Contractual Clauses for such transfers. Details are provided in the Railway Data Processing Addendum.

Cloudflare

The domain uses Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare supports DNS resolution and, for requests routed through its proxy, the delivery and protection of the website. IP addresses and technical request information may be processed for these purposes. The legal basis is Article 6(1)(f) of the GDPR; the legitimate interest is the secure availability of the website.

Cloudflare determines retention periods based on the processing purpose, security needs and legal obligations. Once the data is no longer needed, it is deleted or its further use is restricted. More information is available in the Cloudflare Privacy Policy.

Data may be processed outside the European Economic Area. For such transfers, the Cloudflare Data Processing Addendum provides for safeguards including EU Standard Contractual Clauses.

Fonts, images & appearance

The Source Serif 4 font and images are served by this website. They are not requested from Google Fonts or an external image provider. Light or dark mode follows your browser preference and is not stored on the server.

Cookies & tracking

The website itself does not include analytics or advertising trackers. If you manually select a language, it stores your choice (English or German) in the sebr-language cookie for one year so it is used on subsequent visits. Without a saved choice, the website follows your browser’s language preference. Local Storage and Session Storage are not used.

When protection features are enabled, Cloudflare may set technically necessary security cookies, for example for bot detection or to confirm a security check. These are not analytics cookies added by this website. Information about these features and their retention periods is available in the Cloudflare cookie documentation.

Email contact

If you email me, I process your email address and the contents of your message to handle your enquiry. The legal basis is Article 6(1)(f) of the GDPR; my legitimate interest is responding to your enquiry. The message is deleted once it is no longer needed to handle the enquiry, unless legal retention requirements apply.

Your rights

Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.

To exercise these rights, contact the data controller listed above. You may also lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.