Privacy Policy

Controller

Carsten Becker. Postal address and email can be found on the contact page.

Hosting and server logs

This website is hosted by Vercel Inc., USA. Each time a page is accessed, Vercel automatically processes data transmitted by your browser: IP address, date and time, the page requested, referrer, browser type and operating system. This data is used to deliver the website, keep it secure and detect errors.

The legal basis is Art. 6(1)(f) GDPR. A data processing agreement is in place with Vercel. Transfers to the USA are based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

Audience measurement

To see which pages are read, I use Vercel Web Analytics and Speed Insights. Neither sets cookies. Visits are counted using a hash generated from the request, which expires after 24 hours. I only see aggregated data such as pages visited, referring pages, country, browser and loading times. I cannot identify individual persons. The legal basis is Art. 6(1)(f) GDPR.

Images

Images are delivered via the Cloudinary service. In the process, your IP address is transmitted to Cloudinary so that images can be displayed in a suitable size. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement is in place with Cloudinary. More information: Cloudinary privacy policy.

Videos

Some pages contain videos hosted by Vimeo (Vimeo.com, Inc., New York, USA). They are embedded in “Do Not Track” mode; according to Vimeo, no usage behaviour is recorded. However, your IP address is transmitted to Vimeo when you open a page containing a video. The legal basis is Art. 6(1)(f) GDPR. More information: Vimeo privacy policy.

Language cookie

A technically necessary cookie (lang) stores your chosen language for one year. No consent is required for this (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG).

Contact by email

If you write to me, I process your details solely to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed.

The newsletter link leads to a signup form hosted by Mailchimp (The Rocket Science Group LLC, Atlanta, USA). Data is only collected there: your email address, your name if provided, and the time and IP address of your signup. Signup uses double opt-in. Mailchimp records whether a newsletter was opened and which links were clicked.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in any newsletter or by email. Transfers to the USA are based on the EU-US Data Privacy Framework. More information: Mailchimp privacy policy.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR). You may object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR) and withdraw any consent you have given at any time. An informal email is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.

Changes

I will update this privacy policy when the website or legal requirements change.

Last updated: October 2026