Privacy policy

Last updated: August 2026. Courtesy translation — the German version is legally binding. This site processes personal data sparingly – no tracking, no analytics tools, no advertising cookies.

1. Controller

2. Hosting and server log files

This website is hosted by domainFactory GmbH, Oskar-Messter-Straße 33, 85737 Ismaning, Germany. When you access the site, the host automatically collects and stores information transmitted by your browser in log files:

• IP address of the requesting device
• date and time of access
• file / URL requested, amount of data transferred, message on successful retrieval
• browser type and operating system, referrer URL

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the technically error-free provision and the security of the website. The log data is deleted after 30 days at the latest. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

3. Contact

If you contact me by email or telephone, your details (name, contact data, content of your message) are processed in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). The data is deleted once it is no longer required and no statutory retention periods apply.

There is no contact form on this website. The email links open your own email program; no data is transmitted to me until you send the message yourself.

4. Fonts

All fonts (Space Grotesk, IBM Plex Sans, IBM Plex Mono) are served locally from the server. There is no connection to Google Fonts or other external providers, and no data is transferred to third parties as a result.

5. Cookies, local storage, tracking

The website does not set any cookies for analytics or advertising purposes and does not embed any analytics services (e.g. Google Analytics).

The password-protected area uses your browser’s session storage (sessionStorage) so that the unlocked content does not have to be decrypted again during your visit. This data remains solely in your browser, is not transmitted to the server and is deleted when you close the tab. The legal basis – where required – is Art. 6(1)(f) GDPR (strictly necessary storage, § 25(2) no. 2 TDDDG).

6. Embedded videos (protected area only)

In the password-protected “Video” section, product videos are embedded via YouTube and Vimeo. This content is only loaded after the protected area has been unlocked. The publicly accessible part of the site contains no such embeds.

• YouTube is embedded in extended privacy mode (youtube-nocookie.com). When you play a video, a connection is established to servers operated by Google Ireland Limited; your IP address and the content requested are transmitted, possibly also to the USA. Privacy information: policies.google.com/privacy.
• Vimeo is embedded with the “Do Not Track” parameter (dnt=1). When you play a video, a connection is established to servers operated by Vimeo Inc. (USA) and your IP address is transmitted. Privacy information: vimeo.com/privacy.

The legal basis for this processing is Art. 6(1)(f) GDPR (interest in an appealing presentation of the work samples). Since the videos are only loaded after a deliberate action (unlocking the area and clicking the play button), the transfer only takes place with your involvement. For transfers to the USA the providers rely on standard contractual clauses and/or the EU-US Data Privacy Framework.

7. External links

The site links to external profiles and channels (including LinkedIn, YouTube, Vimeo, Instagram, TikTok, Facebook and the JAMARA online shop). When you click them, the privacy policy of the respective provider applies. I have no influence over that processing.

8. Your rights

You have the following rights regarding your personal data vis-à-vis the controller:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to the contact details above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Data security

The site is delivered over an encrypted HTTPS connection (TLS). The content of the protected area is additionally encrypted client-side with AES-256-GCM and is only decrypted in the browser after the correct password has been entered.

10. Changes

I will amend this privacy policy as soon as changes to the website or to the legal situation make this necessary.