Privacy policy
Note: This is an English translation for convenience. The German version is authoritative.
1. Controller
The controller responsible for data processing on this website is:
Martin Breitsprecher, Neue Große Bergstraße 3-5, 22767 Hamburg, Germany
Email: martin@breitsprecher.de
2. Hosting
This website is delivered through the Cloudflare network. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Cloudflare processes personal data (in particular technical access data) on my behalf to provide the website and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional operation of the website). A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare.
Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses.
3. Access data / server log files
When you access this website, Cloudflare automatically processes technical information, in particular the IP address, date and time of access, page/file accessed, amount of data transferred, referrer URL, and browser type and version.
This processing is carried out to provide the website, ensure security and stability, and analyse errors. The legal basis is Art. 6(1)(f) GDPR. I do not analyse this data myself; technical logs of the website are deleted automatically by Cloudflare after a few days.
4. Contact by email
If you contact me by email, I process the personal data you provide (e.g. email address, content of the message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual communication) and/or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).
5. Contact form
If you write to me via the contact form, I process your name, email address and message in order to reply to your enquiry. The details are delivered to me by email via Cloudflare and are not stored on the web server. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual communication) and/or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).
To protect against spam, I use Cloudflare Turnstile. Turnstile is only loaded once you start filling in the form. It uses technical characteristics of your browser and your IP address to check whether a person is using the form, usually without you having to do anything. Turnstile does not set cookies for advertising or analytics. Your IP address is also used briefly to limit the number of messages per minute.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a contact channel protected against abuse); access to information in your browser is strictly necessary for the sending you requested under Section 25(2) no. 2 TDDDG. More information: Cloudflare privacy policy.
Mailbox and storage period
Emails to me and messages from the contact form are stored in my mailbox at Google Workspace. The provider is Google Cloud EMEA Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on my behalf; a data processing agreement pursuant to Art. 28 GDPR is in place with Google. A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR).
I delete your enquiry once it has been dealt with, unless statutory retention obligations apply. If it leads to an engagement, I keep the business correspondence for as long as commercial and tax law require (up to ten years).
6. Fonts
The fonts used on this website are hosted locally. No connections to external font providers (e.g. Google) are established for this purpose.
7. Local storage (theme setting)
If you actively switch between dark mode and light mode, the website may store your theme selection in your browser’s local storage (Local Storage) so that the setting is retained for your next visit. The storage is used only for this function and is not used for tracking or marketing.
The legal basis is § 25(2) no. 2 TDDDG (strictly necessary for the explicitly requested service) in conjunction with Art. 6(1)(f) GDPR.
You can remove this at any time by clearing the site data or local storage in your browser.
8. Cookies / tracking
I do not use cookies for analytics or marketing purposes and do not use tracking or analytics tools.
9. Your rights
Under the GDPR, you have, in particular, the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
10. Data security
This website uses TLS/SSL encryption to protect transmitted content as effectively as possible.