Privacy policy

1. Controller

The controller responsible for processing personal data on jensfricke.com within the meaning of the General Data Protection Regulation (GDPR) is:

I run this website as a private individual.

2. Summary

In short: jensfricke.com sets no cookies, uses no analytics or advertising services and loads no content from third-party servers. Personal data is only processed where technically necessary to deliver the pages (server log files) or when you write to me. I do not pass data on to third parties; my hosting provider processes it solely on my behalf.

3. Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider uses Neue Medien Münnich GmbH (same address) as a sub-processor. The data centres are located in Dresden and Friedersdorf; hosting takes place exclusively in Germany. I have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR; it processes the data only on my instructions.

4. Server log files

Whenever a page is requested, the web server automatically stores information transmitted by your browser: IP address, date and time, requested address, HTTP status code, amount of data transferred, the previously visited page (referrer) and the browser identification (user agent).

The purpose is to deliver the website, keep it secure (detecting and fending off attacks) and troubleshoot errors. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in secure and stable operation. The hosting provider keeps these log files for seven days and deletes them afterwards.

5. Hosting provider's access statistics

My hosting provider analyses the log files for me to produce access statistics (Webalizer). They summarise which pages were requested how often, which pages visitors came from and which browsers they used. IP addresses are not shortened for this; complete IP addresses may appear in individual overviews.

The statistics are not public; only I can view them in the provider's password-protected customer area. The provider produces them as part of the data processing agreement (see Hosting) and keeps the monthly overviews for as long as the hosting exists; I can delete them there. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in knowing whether and how my projects are used.

6. Fonts and colour mode

The fonts (Geist, Geist Mono) are stored on this server; loading the page does not connect to any font provider.

The ☾/☀ button lets you choose between light and dark colour mode. I store your choice in your browser's local storage (localStorage, key jf.theme) so that it is kept for your next visit. The entry never leaves your device and is only created when you use the button. Under § 25(2) no. 2 TDDDG this is permitted without consent because the entry is strictly necessary for the function you requested. You can remove it at any time in your browser settings (clear site data).

7. Contact by e-mail

If you send me an e-mail, I process your address, your name (if provided) and the content of the message in order to answer your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering enquiries); if your enquiry relates to a contract, Art. 6(1)(b) GDPR. The mailbox is also hosted by ALL-INKL.COM – Neue Medien Münnich (see Hosting). I delete messages once the enquiry has been dealt with and no statutory retention obligations apply.

8. Links to other websites

This website contains links to other services, such as GitHub. Merely viewing this page does not transmit any data to these providers. Only when you click such a link do you leave jensfricke.com; the privacy policy of the respective provider then applies.

9. Encryption

jensfricke.com is delivered exclusively over encrypted HTTPS (TLS). Unencrypted requests are redirected to the encrypted address.

10. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)

Simply write to kontakt@jensfricke.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.