Privacy notice

Controller

Contact about privacy ↗

Visiting this website

Your browser sends connection and request data, including your IP address, the requested page and browser information, to the server to load this website. Processing is based on Article 6(1)(f) GDPR: my legitimate interest in providing a reliable and secure website. Without these technical data, the website cannot be delivered.

This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare receives these technical data to deliver the website and protect it against attacks. Its global network may process data outside the EEA, including in the USA. Cloudflare describes its use of the EU–US Data Privacy Framework and standard contractual clauses in its data processing addendum.

I do not keep separate website access logs. Cloudflare retains technical data according to its operational and security purposes, the nature of the data and applicable legal requirements, and deletes or restricts further use when retention ends. Details are provided in Cloudflare’s privacy policy.

Cookies and embedded content

The site uses no analytics, advertising cookies or tracking. Fonts, images, videos and interactive figures are served from this website. The interactive components run in your browser and do not send your inputs to me or save preferences in local storage. External websites are contacted only when you follow their links.

Email enquiries

If you email me, I process your email address, message and any details you supply to respond. For enquiries about a potential engagement, the legal basis is Article 6(1)(b) GDPR; for other enquiries, it is Article 6(1)(f), my legitimate interest in answering correspondence. Providing these details is voluntary, but I need sufficient information to respond.

I use Gmail, provided in the EEA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Messages and associated data are processed by Google and may be transferred outside the EEA, including to the United States. Google describes its reliance on the EU–US Data Privacy Framework and, where applicable, standard contractual clauses in its data-transfer information. See also Google’s privacy policy.

I delete correspondence when the enquiry is resolved and further retention is unnecessary. Where legal retention obligations or the establishment, exercise or defence of legal claims require retention, I keep the relevant records for that period.

Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. Use the contact link above to exercise these rights.

Right to object: You may object to processing based on legitimate interests on grounds relating to your particular situation.

You may lodge a complaint with a data protection supervisory authority, including Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW). This website does not use automated decision-making or profiling.