Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Danijela Sarcevic, Carlo-Schmid-Straße 3, 64560 Riedstadt, Deutschland

Contact details can be found in the legal notice of this website.

2. Hosting by Netlify (transfer to the USA)

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.

When you visit this website, Netlify automatically collects and stores information that your browser transmits (server log files). This includes in particular:

the IP address of the accessing device

date and time of access

the file or page accessed

the amount of data transferred and the HTTP status code

the previously visited page (referrer), if transmitted

browser type, browser version and operating system used

This data is processed exclusively for the technical delivery of the website, to ensure operational security and to defend against attacks. It is not merged with other data sources and is not evaluated for marketing or analytics purposes.

The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically flawless provision and the security of this website.

Netlify is based in the USA. Personal data – in particular your IP address – is therefore transferred to a third country outside the European Union. The USA does not have a level of data protection fully equivalent to European law; in particular, US authorities may under certain conditions access personal data without the same legal protection as within the EU. The transfer is based on the standard contractual clauses adopted by the European Commission pursuant to Art. 46 (2) (c) GDPR and is safeguarded by supplementary technical and organisational measures.

A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify.

3. Contact form

If you write to me via the contact form, I process the details you enter – name, e-mail address and the content of your message – exclusively to handle your enquiry and for any follow-up questions.

Submissions are technically received by Netlify (Netlify Forms) and stored in my Netlify account; I am notified of new messages by e-mail. The time of submission and the IP address of the sending device are also recorded. No third-party captcha service is used; protection against automated submissions is provided by a hidden form field that only machines fill in.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by sending the form, and Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at entering into a contract. You may withdraw your consent at any time with effect for the future; an informal message to the address given in the legal notice is sufficient.

Your enquiry and the related correspondence are deleted once your matter has been finally dealt with and no statutory retention obligations stand in the way. I delete the submissions in my Netlify account once they have been transferred to my correspondence.

For storage at Netlify, the framework for third-country transfer described under section 2 applies; the data processing agreement with Netlify also covers form processing.

4. Domain and e-mail mailbox (STRATO)

The domains and the e-mail mailbox are operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO’s servers are located in Germany.

If you write to me by e-mail, the content of your message and the connection data transmitted with it are processed and stored on these servers.

The legal basis is Art. 6 (1) (b) GDPR insofar as your message is aimed at initiating or performing a contract, otherwise Art. 6 (1) (f) GDPR on the basis of the legitimate interest in handling enquiries.

A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

5. Fonts and images are served locally

The fonts and photographs used on this website are loaded exclusively from this website’s own server. At no time is a connection established to Google Fonts, an image database or any other external provider. Your IP address is therefore not transmitted to third parties.

6. No cookies, no tracking, no external content

This website uses:

no cookies

no analytics or statistics tools (no Google Analytics or comparable services)

no advertising, remarketing or tracking pixels

no map services (no Google Maps)

no embedded videos, social media plug-ins or iframes

no third-party captcha services

no storage in local storage or session storage

There is therefore no processing requiring consent under § 25 (1) TDDDG. A cookie banner is consequently neither required nor present.

7. Contact by e-mail

If you send me an e-mail, I process the data you provide (in particular name, e-mail address and the content of your message) exclusively to deal with your enquiry.

The legal basis is Art. 6 (1) (b) GDPR for pre-contractual enquiries, otherwise Art. 6 (1) (f) GDPR.

Your enquiry and the related correspondence are deleted once your matter has been finally dealt with and no statutory retention obligations stand in the way. Retention periods under commercial and tax law remain unaffected.

8. Links to LinkedIn and other external sites

This website links to a LinkedIn profile and occasionally to external sites, for instance to name the sources of methods. These are simple links, not embedded content. Merely visiting this website does not transmit any data to the linked providers.

Only when you actively click on a link are you forwarded to the respective provider’s pages, where its privacy policy applies. I have no influence on the processing there.

9. Encrypted transmission (SSL/TLS)

For security reasons and to protect the transmission of confidential content – such as the details in the contact form – this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of your browser begins with “https://”.

10. Your rights as a data subject

You have the following rights vis-à-vis the controller:

right of access to the data stored about you (Art. 15 GDPR)

right to rectification of inaccurate data (Art. 16 GDPR)

right to erasure (Art. 17 GDPR)

right to restriction of processing (Art. 18 GDPR)

right to data portability (Art. 20 GDPR)

right to object to processing (Art. 21 GDPR)

right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

An informal message to the address given in the legal notice is sufficient to exercise your rights.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

The supervisory authority responsible for the controller is:

The Hessian Commissioner for Data Protection and Freedom of Information, Wilhelmstraße 7, 65185 Wiesbaden, Germany

12. Retention period

Unless a more specific retention period is stated in this policy, your personal data remains with me until the purpose for processing no longer applies. If you assert a legitimate request for erasure or withdraw consent, your data will be deleted unless there are other legally permissible reasons for storing it.

13. Changes to this privacy policy

This privacy policy will be adapted as soon as the legal situation, the services used or the functions of this website change. The version published on this page applies in each case.