Privacy / Datenschutz

Controller

The controller determines the purposes and means of the processing described in this notice. Provider information is available in the imprint.

Hosting and server logs

The site is hosted on infrastructure in Germany provided by Hetzner Online GmbH. The web server processes connection data needed to deliver and protect the site.

Log data can include the IP address, date and time, requested URL, HTTP method and status, referrer, and browser or device information.

Processing is used to deliver the site, investigate errors, defend against abuse, and maintain the confidentiality, integrity, and availability of the service.

The legal basis is Article 6(1)(f) GDPR. The legitimate interests are secure, reliable, and abuse-resistant website operation.

Access logs are automatically rotated and retained for no longer than 14 days, unless a specific security incident requires evidence to be kept longer.

Contact form and email

When you contact me, the site processes the information you provide, including your name, email address, inquiry type, message, and the technical submission time. Your IP address is held briefly in memory for rate limiting and abuse prevention.

The data is used only to deliver, review, and respond to your message and to protect the contact channel against misuse.

The legal basis is Article 6(1)(b) GDPR where the message concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR based on the legitimate interest in answering genuine inquiries and protecting the service.

Messages are delivered through the self-operated Mailcow mail infrastructure. For delivery continuity, a configured copy may be sent to a mailbox provided by Google Ireland Limited.

Providing contact data is voluntary. A working email address and a message are required if you want a reply; without them, I may be unable to process or answer your inquiry.

Messages are deleted when the inquiry has been resolved and no contractual, statutory retention, or legal-claims purpose requires continued storage. Relevant correspondence may be retained for the applicable statutory limitation period.

YouTube videos

YouTube videos are blocked by default. No connection to YouTube is created until you actively choose “Load YouTube video”. After that choice, your browser connects directly to YouTube and Google can receive technical data such as your IP address, browser information, and the page you visited. Google may also store or read information on your device.

The legal basis for loading the video is your one-time consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can use the talk description and the external YouTube link without loading the embedded player.

For users in the EEA, the relevant Google service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing can also take place outside the EEA. Google Privacy Policy.

Cookies and local storage

The public site does not use advertising cookies. If you choose a light or dark theme, that preference is stored locally in your browser so the explicitly requested setting can be restored. Protected administration areas use strictly necessary security and session cookies.

These functions are necessary to provide settings or protected services requested by the user under Section 25(2)(2) TDDDG. They are not used for advertising or cross-site tracking.

Analytics

The production site does not use analytics, visitor profiling, heatmaps, or session replay. PostHog analytics are disabled. This notice will be updated before any analytics service is activated again.

Newsletter

Newsletter registration is currently disabled. The current site does not accept new newsletter subscriptions or send newsletters. A newsletter will not be re-enabled until a documented consent, double-opt-in, and simple unsubscribe process is in place and this notice has been updated.

International transfers

When you actively load YouTube content, or when a contact message is copied to a Google-provided mailbox, processing may take place outside the EEA. Google states that it relies on applicable adequacy decisions, the EU-U.S. Data Privacy Framework, and Standard Contractual Clauses where required. Google data-transfer frameworks.

Your rights

Subject to the legal requirements, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object to processing based on legitimate interests
• Right to data portability
• Right to withdraw consent at any time with effect for the future
• Right to lodge a complaint with a supervisory authority

To exercise a right, contact privacy@appik.net. No automated decision-making or profiling with legal or similarly significant effects takes place.

Supervisory authority

You may contact this or another competent supervisory authority if you believe that personal data is being processed unlawfully.