Privacy policy

As of October 2026. This is an English courtesy translation. The German version is legally authoritative.

This website is a personal business card. There is no tracking, no advertising, no cookies and no forms. Fonts and scripts are served from this website itself, nothing is loaded from third parties.

1. Controller

2. Visiting the website (hosting)

The website is provided through Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary access data (including IP address, date and time, requested resource and browser type) to deliver the page and protect it against abuse. How long Cloudflare keeps this data follows Cloudflare's own rules. I keep no access logs of my own. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and working service).

3. Contact by email

If you write to me, your message is forwarded through Cloudflare(Email Routing) to my mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). I process your details to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where it concerns a project or contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). I delete messages once they are no longer needed, unless statutory retention obligations apply.

4. Links to other websites

This site links to my CV (mboiman.github.io), GitHub and LinkedIn. A provider only receives data from you once you follow a link. Their privacy information applies there.

5. Transfers to third countries

Cloudflare and Google are based in the USA or belong to groups based in the USA, so data may also be processed there. Transfers to the USA are based on the EU-U.S. Data Privacy Framework (where the company is certified) or on the EU standard contractual clauses under Art. 46 GDPR.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing under Art. 6(1)(f) GDPR. An email to the address above is enough. You may also lodge a complaint with a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.