Privacy Policy

Protecting your personal data is important to me. This Privacy Policy explains what data is processed when you visit this website, for what purpose, and what rights you have in this regard, in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

2. Hosting

This website is hosted by an external service provider (hosting provider) on my behalf:

The hosting provider processes data on my behalf under a data processing agreement pursuant to Art. 28 GDPR and only in accordance with my instructions and this Privacy Policy.

3. Server log files

Delivering this website to your device technically requires processing your IP address for the duration of the connection; this is an unavoidable, momentary part of how internet communication works, and its legal basis is my legitimate interest pursuant to Art. 6(1)(f) GDPR in operating this website.

Beyond this, I have configured the hosting account for this website so that the hosting provider does not create or store any server log files and does not generate any usage or access statistics. Accordingly, no data about your visit – such as your IP address, browser type, referrer URL, or access times – is logged, retained, or evaluated.

4. Cookies and fonts

No cookies are set for visitors to the public pages of this website, and no third-party analytics or tracking tools are used. Web fonts used on this site are hosted on my own server rather than loaded from a third-party provider (such as Google Fonts), so no data about your device is transmitted to a third party for this purpose.

5. Contacting me

If you contact me by email, the personal data you provide (such as your email address, name, and the content of your message) will be stored and used solely for the purpose of processing and responding to your inquiry. The legal basis is my legitimate interest in responding to inquiries addressed to me (Art. 6(1)(f) GDPR) or, where your inquiry relates to a (pre-)contractual matter, Art. 6(1)(b) GDPR. This data will not be passed on to third parties without your consent and will be deleted once it is no longer required for this purpose, unless statutory retention obligations apply.

6. Embedded YouTube and Vimeo videos

Some articles on this website (in the Journal section) embed videos hosted on YouTube (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or Vimeo (provided by Vimeo.com, Inc., New York, USA). When you open a page containing such an embedded video, a connection to the respective provider's servers is established and your IP address, browser information, and the fact that you visited this page are transmitted to that provider, even if you do not click play. The provider may set its own cookies and may combine this information with other data it holds about you.

The legal basis for this processing is my legitimate interest pursuant to Art. 6(1)(f) GDPR in presenting multimedia content in an appealing way. Both Google and Vimeo are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of data protection for transfers of personal data to the United States.

For further information on how these providers process your data, please refer to their respective privacy policies: https://policies.google.com/privacy (YouTube/Google) and https://vimeo.com/legal/policy (Vimeo).

7. Historical blog comments

This website includes historical blog comments dating back to 2004, migrated from a previous version of this site. These comments may contain the commenter's name and, where voluntarily provided at the time, a website URL. If you would like a comment containing your personal data removed, please contact me using the details above.

8. Your rights

Subject to the requirements of the GDPR, you have the right to:

• request confirmation of whether personal data concerning you is processed, and access to that data (Art. 15 GDPR);
• request the rectification of inaccurate or incomplete personal data (Art. 16 GDPR);
• request the erasure of your personal data (Art. 17 GDPR);
• request the restriction of the processing of your personal data (Art. 18 GDPR);
• receive your personal data in a structured, commonly used, machine-readable format, or request that it be transferred to another controller (Art. 20 GDPR);
• object, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR (Art. 21 GDPR); and
• withdraw, at any time and with future effect, any consent you have given (Art. 7(3) GDPR).

To exercise any of these rights, please contact me using the details set out under “Controller” above.

9. Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is: