Privacy Policy
Datenschutzerklärung · Last updated: 19 October 2026
1. Controller
The controller responsible for personal data on this website (Art. 4(7) GDPR) is Andrew Chukwu, CISSP. Full contact details are listed in the Impressum.
2. Hosting
This site is delivered through a cloud hosting and content-delivery provider. The provider processes standard technical data (such as IP address and request metadata) to serve the site securely and reliably. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). International transfers are covered by EU Standard Contractual Clauses.
3. Contact form
When you use the contact form, the details you submit are processed solely to respond to your enquiry and are kept only as long as needed for that purpose. You will receive a confirmation email at the address you provide. Legal basis: Art. 6(1)(b) and (f) GDPR.
4. Transactional email
Transactional emails (such as confirmations) are sent through an email provider used solely for delivery. Each email includes a one-click unsubscribe link.
5. RSS feed
The RSS feed serves only public content. No personal data of readers is collected.
6. Cookies, local storage & tracking
This site uses no analytics, advertising, or third-party tracking. Fonts are served from this site's own origin and no external embeds are used. Only strictly necessary or functional storage is used, for example, to keep emoji reactions from being counted twice or to keep the site owner signed in to the admin area. No consent banner is shown because no consent-requiring technologies are used. This will be updated if that ever changes. A full list of the stored entries is available in the Cookie Policy.
7. Processors and recipient categories
Personal data submitted via the contact form, newsletter signup, or generated by normal use of the site may be processed on our behalf by the following categories of recipients, each bound by a data processing agreement and, where applicable, EU Standard Contractual Clauses:
- Hosting & CDN: a global edge-delivery and security provider (content delivery, DDoS protection, request logging).
- Database & file storage: a managed cloud database and object-storage provider, hosted in the EU.
- Transactional email delivery: the email delivery provider used to send confirmations and newsletter issues.
- Image search (admin only): a stock-photography service used by the site owner to select editorial imagery. No visitor data is sent to it.
No personal data submitted to this site is used to train AI models, either by us or by our processors. AI used internally by the site owner to draft article content does not receive visitor data.
8. Retention
Personal data is kept only as long as needed for the purpose it was collected for and to meet legal record-keeping obligations:
- Contact form submissions: up to 24 months from last correspondence, then deleted on request or on the next housekeeping cycle.
- Newsletter subscribers: kept until you unsubscribe; the unsubscribe record itself is kept indefinitely to honour your opt-out (Art. 21 GDPR).
- Email delivery logs: up to 12 months for deliverability and abuse investigation.
- Rate-limit and abuse logs: up to 30 days.
9. Your rights
You have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. To exercise these rights, contact us using the details in the Impressum.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority in your EU member state.
11. Changes to this policy
This policy may be updated to reflect changes in the service or in legal requirements. The current version is always available on this page.