Privacy Policy

1. Controller and contact

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Dennis Herbrik
Weilimdorfer Straße 103
70469 Stuttgart
Germany

Email: dennisherbrik1988@gmail.com

This Privacy Policy explains which personal data is processed when you visit this website, how and for what purposes this is done, and which rights you have as a data subject.

2. Overview of data processing

Personal data means any information relating to an identified or identifiable natural person, such as name, email address, IP address or user account information.

In particular, the following data may be processed when you use this website:

• Technical data when accessing the site (e.g. IP address, browser type, operating system, time of access)
• Data you provide when creating an account or logging in (e.g. email address, display name)
• Content data you create on the site (e.g. posts, profile information)
• Data transmitted when contacting me (e.g. via email or social networks)
• Data stored in cookies or similar technologies (e.g. for login and essential functions)

3. Data processing in detail

3.1 Website access and server log files

When you visit this website, certain technical data is automatically processed. This usually includes your IP address, the date and time of the request, the URL accessed, the referrer URL, the browser used and the operating system.

This processing is necessary to display the website, to ensure stability and security, and to detect or prevent misuse. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in providing a secure and stable website).

Server log files are generally deleted automatically after a short period, unless longer storage is required in individual cases (e.g. for the clarification of security incidents).

3.2 User accounts and authentication

You can create an account and log in to access additional functions (e.g. creating or managing posts). For this purpose, I process the data you provide, such as:

• Email address
• Display name / username
• Authentication information (e.g. hashed passwords where applicable)
• Data transmitted by identity providers (e.g. Google) if you use social login

Authentication and account management are implemented using services from Firebase (Google) and a custom backend for user data and posts. Depending on your choice, login can take place via email/password or via Google Sign-In.

The legal basis for this processing is Art. 6 (1) lit. b GDPR (performance of a contract and pre-contractual measures), as the account is necessary to provide the corresponding features.

Account data is stored for as long as your account exists. If you delete your account, your profile data will be removed or anonymised, unless statutory retention obligations require longer storage (e.g. for contractual or tax-related reasons). Content you have published (e.g. posts) may remain visible in anonymised form.

3.3 Content you publish

When you create posts or other content on the site, this content is stored and displayed to other visitors according to the functionality of the platform.

Depending on how you use the site, this may include texts, titles, categories and – if you decide to share them – additional information about you as the author.

The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract), as the creation and publication of content is part of the services offered through this site.

3.4 Contact via email or social networks

If you contact me by email or via social networks (e.g. LinkedIn or X/Twitter), the data you provide (e.g. name, email address, content of the message) will be processed in order to handle your request.

The legal basis is Art. 6 (1) lit. b GDPR if your request relates to a (potential) contractual relationship, and otherwise Art. 6 (1) lit. f GDPR (legitimate interest in replying to inquiries).

Communication data is stored for as long as necessary to process your request and in accordance with statutory retention periods, if applicable.

3.5 Analytics and usage data (if used)

This website may use analytics tools to better understand how visitors use the site (e.g. which pages are visited and how often). Where such tools are used, data like IP address, device information, approximate location and usage behaviour may be processed.

Where required by law, analytics tools are only activated if you have given consent (legal basis: Art. 6 (1) lit. a GDPR). You can withdraw your consent at any time with effect for the future.

4. Cookies and local storage

This website uses cookies and similar technologies (e.g. local storage) to provide essential functions and, where applicable, to improve the user experience.

In particular, the following types of cookies/technologies may be used:

• Essential cookies / local storage: required for technical operation, such as storing login status or security settings.
• Functional or preference cookies: to remember your settings or improve usability (if used).
• Analytics cookies: to analyse usage of the site (only if activated with your consent).

Essential cookies are necessary to provide the website and its basic functions and are therefore processed on the basis of Art. 6 (1) lit. f GDPR. Other cookies are only used if you have given your consent (Art. 6 (1) lit. a GDPR).

You can configure your browser to notify you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

5. Recipients and data transfers

Personal data is only transmitted to third parties if this is necessary to provide the website and its functions, required by law, or if you have given your consent.

Possible recipients include in particular:

• IT service providers for hosting and technical operation of the website
• Firebase / Google as provider of authentication and, where applicable, other services
• Service providers that support me in operating and developing this website (if used)

In connection with these services, data may be transferred to countries outside the European Union (third countries), in particular the United States. In such cases, I aim to ensure an adequate level of data protection, for example through the use of EU standard contractual clauses or other instruments permitted by the GDPR.

6. Storage duration

Personal data is stored only for as long as necessary for the purposes described in this Privacy Policy or as required by statutory retention periods.

• Server log data: usually deleted automatically after a short period, unless required longer for security or legal reasons.
• Account data: stored for the duration of your account and deleted or anonymised after deletion of the account, unless statutory retention obligations apply.
• Communication data: stored as long as necessary to handle your request and in accordance with legal retention obligations.

If data is processed on the basis of your consent, it will be deleted when you withdraw your consent, unless further processing is permitted or required by law.

7. Your rights under the GDPR

As a data subject, you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR) where processing is based on your consent

You can exercise these rights by contacting me using the contact details given above.

In addition, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

8. No obligation to provide data

In most cases, you are neither legally nor contractually obliged to provide personal data when using this website. However, some functions cannot be provided without certain data. For example, you cannot create an account without providing an email address.

Where the provision of data is mandatory or necessary for the conclusion of a contract, this will be indicated separately where appropriate.

9. Use of the website by minors

This website is not directed at children under the age of 16. I do not knowingly collect personal data from children under 16. If you believe that a child has provided personal data via this site, please contact me so that I can delete such data.