Privacy notice

Delivering the website

This website runs on a Raspberry Pi with Nginx. Public HTTPS access goes through Cloudflare Tunnel. Cloudflare, Inc. processes technical connection and request data, including your IP address, the time of the request, the requested URL and browser information. This is necessary to deliver the site and protect it against disruption and abuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is to operate the website reliably and securely.

Cloudflare may process data outside the European Economic Area. See the Cloudflare Privacy Policy and Cloudflare Data Processing Addendum for information on processing, retention and safeguards for international transfers. The addendum provides for safeguards including the EU–US Data Privacy Framework and EU Standard Contractual Clauses where applicable.

Cloudflare makes it harder for bots to harvest the contact email address. A script makes the address readable in your browser. During security checks, Cloudflare may use a cookie to remember that a check was passed. The Cloudflare documentation describes these cookies and when they expire.

Server logs on the Raspberry Pi

Nginx writes access and error logs to diagnose problems and protect the site. The access log records the address of the connection to the web server, the time, the requested URL and HTTP method, the status code, the response size, and the browser and referring page when supplied. For requests made through the tunnel, the default Nginx log records the local tunnel service as the connection address. Error logs contain technical messages. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is troubleshooting and keeping the site secure.

The server checks whether logs need to be rotated daily. It keeps up to 14 archived files alongside the current file for each log. Empty files are skipped. The oldest archive is deleted when another rotation exceeds the retention limit.

Contact by email

If you contact me by email, I process your sender address, your message and any information you include so that I can reply and, where necessary, document the enquiry. The legal basis for contractual or pre-contractual enquiries is Article 6(1)(b) GDPR. In other cases it is Article 6(1)(f) GDPR, based on my legitimate interest in handling your enquiry. Contacting me is voluntary. I need a working reply address to respond.

I use Gmail for the project mailbox. Google generally identifies Google Ireland Limited as the provider of its consumer services in the European Economic Area. Google may also process data outside the EEA. See the Google Privacy Policy and information on international data transfers. I keep messages as long as necessary to handle the enquiry, document it where needed or comply with statutory retention obligations.

Your rights

Subject to the GDPR, you may request access to your data, rectification, erasure, restriction of processing and, where applicable, data portability. Where I process data under Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. Use the contact email above to make a request.

You may also lodge a complaint with a data protection supervisory authority under Article 77 GDPR, such as the Rhineland-Palatinate data protection authority.