Privacy Policy
This is a translation for convenience. The German version is the legally binding one.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Daniel Wulf (sole proprietor)Virchowstraße 19
72800 Eningen unter Achalm
Germany
Email: daniel_wulf@outlook.de
There is no legal obligation to appoint a data protection officer.
2. Principle
This is a static website. It sets no cookies, uses no analytics or tracking tools, embeds no fonts, maps, videos or scripts from third-party servers, and stores nothing in your browser's local storage.
Every component — font files, images, stylesheet — is served from the same server as the page itself. A Content Security Policy on the serving host enforces this technically: requests to other servers are blocked by the browser. That is also why there is no cookie banner here — there would be nothing to consent to.
3. Hosting and server logs
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify processes the data on my behalf under a data processing agreement pursuant to Art. 28 GDPR.
When a page is requested, access data is logged on the server. This typically includes:
- the IP address of the requesting device
- the date and time of the request
- the name and URL of the file requested
- the volume of data transferred and whether the request succeeded
- the browser and operating system used, and the previously visited page if the browser transmits it
The purpose of this processing is the technical delivery of the site, system security and the prevention of attacks. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in operating the website securely and reliably. This data is not evaluated for analytics or marketing purposes, and I do not retrieve personal log data. Deletion of the logs follows the host's own schedule.
4. Transfer to the United States
Netlify is based in the United States, so processing may take place outside the European Union. The transfer is based on the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR, which form part of the data processing agreement with Netlify.
Please note that public authorities in the United States may under certain conditions access such data, and that the level of protection does not correspond to the GDPR in every respect. Fully equivalent legal remedies against such access cannot be guaranteed.
5. Contact by email
If you send me an email, I process the data you provide — your email address, your name and the content of your message — solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns entering into or performing a contract, and otherwise Art. 6 (1) (f) GDPR based on my legitimate interest in responding.
My business email is retrieved and stored through an Outlook mailbox service operated by Microsoft Corporation. Your message is kept there for as long as it is needed to handle your enquiry. After that I delete it, unless statutory retention obligations — in particular under commercial and tax law — apply.
An unencrypted email can be read by third parties in transit. For confidential matters we can agree on another channel.
6. Linked services
This site links to external services, including Apple's App Store and my project sites nomad-travelguide.de and vumble.de. The third-party server is only contacted once you click such a link; until then no data is transmitted to it. The respective provider is responsible for processing on the linked pages.
7. Your rights
Under the GDPR you have the following rights in relation to me:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-WürttembergLautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
- access to the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
An email to daniel_wulf@outlook.de is enough to exercise them.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is:
8. Encryption and no automated decision-making
The site is served exclusively over a TLS-encrypted connection, recognisable by the “https” in the address bar.
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. You are under no statutory or contractual obligation to provide me with personal data; without getting in touch, however, I cannot answer your enquiry.
9. Changes to this policy
I update this policy when the website or the legal situation changes. The version available here applies; the date it was last updated is shown above.