Legal

Privacy Policy

This privacy policy is legally binding in its German version. The English text below is an unofficial translation provided for convenience.

This website is deliberately data-minimal: it uses no consent-requiring cookies, no advertising services and no external fonts. For reach measurement it uses only a cookieless analytics tool (see section 8).

1. Controller

Janis Weidenauer
Pappelallee 9
68167 Mannheim
Germany
Email: contact@weidenauer.tech

2. Hosting

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access the site, Cloudflare processes technically necessary connection data as a processor on our behalf (see server log files). The legal basis is Art. 6 (1) (f) GDPR. As Cloudflare is a US company, data may be transferred to the USA; this is covered by the EU-U.S. Data Privacy Framework and the EU Commission's standard contractual clauses.

3. Server log files

When the website is accessed, your browser automatically transmits information such as IP address, date and time, the page requested, the HTTP status code, the amount of data transferred, your browser type and operating system, and possibly the referring page. This data is used solely for the technical operation and security of the site (Art. 6 (1) (f) GDPR) and is not merged with other sources or used for advertising or analytics.

4. Contact form

When you use the contact form, I process the data you enter (name, email address, selected topic and message) solely to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (initiating/performing a contract) and Art. 6 (1) (f) GDPR (handling enquiries). Transmission is encrypted (HTTPS). The data is deleted once it is no longer required and no legal retention obligations apply.

5. Spam protection with Cloudflare Turnstile

To protect the forms against automated abuse I use Cloudflare Turnstile (provider: Cloudflare, Inc., USA). Turnstile checks whether the input comes from a human and processes technical information about your browser and device as well as your IP address. It is designed to work without cookies and without cross-site tracking. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is preventing spam and automated attacks. For any transfer to the USA, the statements in section 2 apply accordingly (EU-U.S. Data Privacy Framework, standard contractual clauses).

6. Email delivery via Brevo

Messages submitted through the form are delivered to me by email. For delivery I use Brevo (based in the European Union, with EU server locations). Brevo processes the data provided in the form as a processor on my behalf (data processing agreement under Art. 28 GDPR). The legal basis is Art. 6 (1) (b) / (f) GDPR.

7. Downloads (checklist)

Where a downloadable document is offered in exchange for your email address, I process that address solely to provide or send you the download. No newsletter list is built and no marketing contact takes place without your separate consent. The legal basis is Art. 6 (1) (b) GDPR. Delivery and spam protection work as described in sections 5 and 6.

8. Web analytics with Cloudflare Web Analytics

For reach measurement I use Cloudflare Web Analytics (provider: Cloudflare, Inc., USA). This tool is cookieless: it sets no cookies, uses no localStorage and builds no cross-device profiles. Only aggregated metrics are collected — such as pages viewed, approximate origin (country), referrer and browser/device type — without attributing them to an individual. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in data-minimal reach measurement). As no information is accessed or stored on your device, no consent under § 25 TDDDG is required. For any transfer to the USA, the statements in section 2 apply.

9. Cookies and local storage

This website sets no cookies and no consent-requiring technologies. Only your choice of light or dark theme — if you change it — is stored locally in your browser (localStorage, key theme). This information never leaves your device.

10. Contact by email

If you write to me by email, I process the data you provide (email address, message content) to handle your request (Art. 6 (1) (b) / (f) GDPR). The data is deleted once it is no longer required and no legal retention obligations apply.

11. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on Art. 6 (1) (f) GDPR, as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). To exercise your rights, a message to the email address above is sufficient.

12. Status

Status of this privacy policy: June 2026. It will be updated as the website or the legal situation changes.