Data,
minimal.
Honest.
This site processes as little personal data as possible. Below: what is collected, why, for how long — and which rights you have to change that.
§ 01 — Controller
Who processes your data.
- Data Controller
- Dr. Mark Wernsdorfer
Sole Trader · Independent Consulting - Address
- Schivelbeiner Str. 11
10439 Berlin
Germany - Contact
-
Email: wernsdorfer@gmail.com
Phone: +49 176 24 003 575 - Data Protection Officer
- Not legally required given the size of the sole proprietorship (§ 38 BDSG / Art. 37 GDPR). Direct any privacy questions to the controller above.
§ 02 — What & why
Which data is processed.
- Server logs
-
When you load this site, the hosting provider collects technically
necessary data in server logs: IP address, date and time of access,
URL requested, HTTP status code, bytes transferred, referer and
user-agent. This data is necessary to deliver the site, detect attacks
and maintain IT security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable, secure website).
Retention: 7 days, then automatic deletion. - Contact form
-
If you use the contact form, you submit: name, email address,
optionally your organisation, and the message itself. This data
lands only in my email inbox at the mail provider — it is not shared
with third parties and not used for advertising.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or (f) (legitimate interest in answering enquiries).
Retention: Correspondence stays in the mailbox until you request deletion or retention is no longer necessary (typically 3 years after last contact; potentially longer if statutory retention obligations under § 257 HGB / § 147 AO apply). - Email & phone
- If you contact me directly by email or phone, the same legal bases as the contact form apply. No automatic call recording takes place.
- Spam protection
- The contact form uses hidden honeypot fields (bot detection) and a minimum dwell-time check. Both run client-side in your browser; no data is transmitted to external anti-spam services.
- Cookies & tracking
-
This site sets no cookies, runs no tracking,
and embeds no third-party scripts such as analytics, ad
pixels, or social media plug-ins. Local storage (
localStorage) is used only to remember your day/night theme choice and language (DE/EN) between visits — this data never leaves your browser. - Web fonts
- The web fonts (Syne, Rubik, Space Mono, Caprasimo) are stored on and served from this website's own server. No connection to Google Fonts or any other third party is established; loading the fonts transmits no data to third parties.
- Videos (YouTube)
-
Some project videos are embedded as click-to-play. When the page
loads, only a locally stored preview image is shown — no data flows
to YouTube. Only when you actively start a video does the YouTube
player load in privacy-enhanced mode (youtube-nocookie.com; Google
Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland),
transmitting your IP address to YouTube.
Legal basis: Art. 6(1)(a) GDPR (consent given by actively starting the video).
§ 03 — Hosting
Where the site runs.
- Hosting provider
-
LA Webhosting, Inh. Philipp Lahn
Azmannsdorfer Weg 2
99085 Erfurt
Germany
Email: kontakt@la-webhosting.de
A data processing agreement (DPA) under Art. 28 GDPR is in place with the hosting provider. The provider processes server logs (see § 02) only on instruction and within the scope of the hosting contract. - Server location
- Servers are located in Germany / the European Union. No transfers to third countries take place as part of hosting.
§ 04 — Your rights
What you can demand.
- Access (Art. 15 GDPR)
- You can ask at any time whether and which data I hold about you, and request a copy.
- Rectification (Art. 16 GDPR)
- Inaccurate data is corrected without delay on your request.
- Erasure (Art. 17 GDPR)
- You can request deletion of your data, provided no statutory retention obligations conflict.
- Restriction (Art. 18 GDPR)
- Instead of erasure, you can also request restriction of processing.
- Data portability (Art. 20 GDPR)
- You receive your data in a structured, common format for transfer to another controller.
- Objection (Art. 21 GDPR)
- You can object to processing based on legitimate interest at any time.
- Complaint (Art. 77 GDPR)
- You can lodge a complaint with a supervisory authority at any time. For Berlin this is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI), Alt-Moabit 59 – 61, 10555 Berlin, Germany.
§ 05 — Status
This notice can change.
- Last updated
- August 2026
- Updates
- This notice will be updated to reflect technical or legal changes. Each visit is governed by the version of this page in effect at that time.