Privacy

Controller

Felix Winkel
mail@felix-winkel.de

Postal address and phone number: Imprint.

Hosting and analytics

Cloudflare delivers this site and its images, protects it from attacks and provides Web Analytics. Cloudflare processes technical request data such as your IP address for these purposes. Legal basis is my legitimate interest in a secure and reliable website, Art. 6 (1)(f) GDPR.

Web Analytics uses a JavaScript beacon to measure page views, referrers, browser and device information, country and page performance. It uses no cookies or browser storage and does not fingerprint visitors. Analytics data is available to me for six months. Legal basis is my legitimate interest in understanding and improving this site, Art. 6 (1)(f) GDPR.

Cloudflare, Inc. acts as my processor. Data may be processed in the USA; the EU–US Data Privacy Framework and standard contractual clauses provide the transfer safeguards. Because the public pages use no cookies, browser storage or fingerprinting, no consent banner is required under § 25 TDDDG.

Guestbook

If you submit an entry, I store your display name, message, submission time and salted hashes of your IP address and user agent with Cloudflare. Your name and message become public only after approval. No email address is requested.

Your consent is the legal basis for storing and publishing the entry, Art. 6 (1)(a) GDPR. The hashes are used only to prevent abuse and are based on my legitimate interest in protecting the guestbook, Art. 6 (1)(f) GDPR. They are deleted after 30 days. The entry remains until you ask me to remove it.

Cloudflare Turnstile loads when you start using the form and processes connection and browser signals to block automated submissions. This is based on the same legitimate interest in preventing abuse.

Contacting me

If you write or call, I process what you send me in order to answer, on the basis of Art. 6 (1)(f) GDPR, or Art. 6 (1)(b) GDPR if it concerns a contract. I delete the correspondence when it is no longer needed, unless a legal retention period applies.

Your rights

Depending on the circumstances, you may:

• access the data held about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have data erased (Art. 17 GDPR)
• have processing restricted (Art. 18 GDPR)
• receive portable data (Art. 20 GDPR)
• withdraw a consent you have given, with effect for the future (Art. 7 (3) GDPR)

One address for all of it: mail@felix-winkel.de.

Where I process data on the basis of legitimate interests under Art. 6 (1)(f) GDPR, you may object at any time on grounds relating to your particular situation, Art. 21 GDPR.

You may also lodge a complaint with a data protection authority, Art. 77 GDPR. German authorities are listed at bfdi.bund.de.