Privacy Notice
As of 2026 · This site sets no cookies, loads nothing from Google and counts no visitors. · Deutsche Fassung (legally binding)
1. Controller
Paul BockSchweffelstr. 19
24118 Kiel, Germany
Email: p.r.bock@proton.me
No data protection officer has been appointed; the conditions of § 38 BDSG are not met.
2. Hosting and server log files
This website is hosted by GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When a page is requested, GitHub processes technically necessary access data:
- IP address of the requesting device
- date and time of access
- file requested and volume of data transferred
- referrer URL and browser identification (user agent)
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the technically faultless delivery and the security of the website. I have no influence on how long these logs are kept and no access to them. The transfer to the USA relies on GitHub's certification under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023) and on standard contractual clauses. Details: GitHub Privacy Statement.
3. Fonts
The fonts used (IBM Plex Sans, IBM Plex Mono) sit on the same server as the website and are served locally. There is no connection to Google Fonts or any other third-party server, and no IP address is passed to anyone.
4. Local storage in your browser (localStorage)
The site sets no cookies. It stores three values in your browser's local storage:
- Colour scheme (
theme) — whether you chose light or dark, so the choice survives to your next visit. - View (
view) — whether the work is shown as a grid or as a list. - Idle log (
log.v1) — if you type a line into the note field, it stays in your browser only. It is sent to no server and is visible to nobody but you.
All three are required for functions you explicitly asked for (§ 25(2) no. 2 TDDDG) and contain no identifier that could recognise you. You can delete them at any time through your browser settings.
5. Contact by email
If you write to me, I process what you send in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR. The email service is Proton Mail (Proton AG, Geneva, Switzerland); an adequacy decision of the EU Commission exists for Switzerland. I delete enquiries once they are settled and no statutory retention period stands in the way — as a rule after six months, and for commissioned work after the commercial and tax retention periods of six and ten years respectively.
6. Contact form
The form on the homepage transmits nothing to this website and nothing to a service provider. On submit your browser hands the filled-in fields — name, email address, type of project, budget range, message — to your own mail client, which opens the draft. You decide there whether to send it. From the moment it reaches me, section 5 applies. No form-handling service sits in between, no transfer to a third country takes place, and no IP address is logged.
7. Appointment booking
For the 15-minute intro call I link to Cal.com (Cal.com, Inc., USA). The link opens the provider's page; data is collected there and their privacy policy applies. Nothing from Cal.com is embedded in this website — without a click, no data flows.
8. External links
The links to Instagram, Threads and GitHub are plain hyperlinks. No counting pixels, social plugins or buttons that would transfer data while the page loads are embedded. A connection is made only once you click the link.
9. No analytics, no tracking
No analytics tools, no advertising networks, no reach measurement and no profiling are in use. There is no automated decision-making within the meaning of Art. 22 GDPR.
10. Your rights
You have the right at any time to
- access the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
An informal email to the address above is enough.
11. Right to lodge a complaint
You can complain to a supervisory authority. The competent one is
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)Holstenstraße 98, 24103 Kiel, Germany
datenschutzzentrum.de
12. Changes
If the website changes technically, this notice changes with it. The version published here is the one that applies.