Privacy Policy

This website sets no cookies, embeds no analytics or advertising services, and loads nothing from third-party servers. The typeface sits on the same server as the site itself, so no font library is contacted either. What does arise is the technical connection data any web server needs in order to deliver a page. That is what follows.

The controller for the processing on this website within the meaning of Art. 4 (7) GDPR is:

The site runs on a server I operate myself, in a data centre of netcup GmbH, Karlsruhe. The server is located in Nuremberg, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When a page is requested, the server processes the technical data your browser transmits. That includes your IP address, the date and time of the request, the address requested, and whether delivery succeeded. This is what makes the page reach you, and it helps me spot faults and attacks.

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in operating the site securely and without disruption. This data is not combined with other sources, and no visitor profile is created.

The server logs are forwarded to Grafana Cloud (Grafana Labs) so that I can read them without logging into the server. They are deleted there automatically once the retention period configured in the log backend expires. I keep no copies beyond that.

The connection to this site is encrypted with TLS throughout, which your browser shows as a padlock. The certificate comes from Let's Encrypt. Requests over unencrypted HTTP are redirected to the encrypted address automatically.

The form on the contact page sends nothing to this website. It collects your input in the browser and hands it to your own email program, which opens a prepared message. You are the one who sends it, through your own email provider. No record of it is created on this site's server.

If you email me, I process what you write in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR where a contract is being prepared, and otherwise Art. 6 (1) (f) GDPR, my legitimate interest in answering. I keep such messages until your matter is settled and no statutory retention periods stand in the way.

In a few places I link to my profiles on LinkedIn and GitHub. These are ordinary links, not embedded content: unless you click, the provider in question learns nothing about your visit here. Once you click, that service's own privacy policy applies.

You have the right to obtain information about the data held about you (Art. 15 GDPR), to have it rectified (Art. 16), erased (Art. 17), or its processing restricted (Art. 18), and to data portability (Art. 20). Where processing rests on a legitimate interest, you may object under Art. 21 GDPR. An informal message to philip.jurke.92@gmail.com is enough.

Independently of that, Art. 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority, usually the one where you habitually reside.