Privacy policy

Who is responsible

Felix Rohlfing
Döllersfeldchen 33
52379 Langerwehe
Germany
felix@felixrohlfing.dev

Responsible within the meaning of the GDPR. There is no data protection officer; a one-person business is not required to appoint one.

Server log files

Every time a page is requested, the hosting provider's web server records the request: IP address, date and time, the file requested, the amount of data transferred, the referring page and the browser and operating system in use. This happens for every website and cannot be switched off — without it a server cannot answer a request or defend itself against attacks.

Legal basis is Article 6(1)(f) GDPR: the legitimate interest in delivering this site reliably and securely. The data are not merged with other sources, not used to identify anyone, and not passed on. They are kept only for as long as delivery and security require.

The site is hosted by Hostinger International Ltd., which processes these data on my behalf under the data processing agreement Hostinger publishes (version of 29 September 2026). That agreement also lists the further service providers Hostinger uses.

Hostinger stores and processes data in several countries; according to its own privacy notice (version of 10 July 2026) some of its servers are also located outside the EU and the European Economic Area. Hostinger states that it transfers data there only on a sufficient legal basis and uses the standard contractual clauses approved by the European Commission (Art. 46 GDPR).

Contact by email

If you write to me by email, your address and the content of your message are stored so that I can answer and follow up on the enquiry. The mailbox is hosted by Hostinger.

Legal basis is Article 6(1)(b) GDPR where the message concerns a possible contract, otherwise Article 6(1)(f) GDPR. I delete enquiries once they are settled and nothing requires me to keep them.

Contact form

The contact page has a form. If you send it, the server receives what you typed: your email address, your message and — only if you give it — your name. A script on this site's server passes these on as one email, over an encrypted and authenticated connection, to the mail server of my mailbox at Hostinger. It stores nothing of this itself: no file with your data, no database, no cookie, no IP address. The only thing it keeps is a counter of how many messages were sent in the last 24 hours (bare timestamps, no personal data) to stop mass requests. The request itself appears in the server log files described above.

Purpose: answering your enquiry. Legal basis is Art. 6(1)(b) GDPR where the message concerns a possible contract, otherwise Art. 6(1)(f) GDPR — my legitimate interest in answering enquiries. Your email address and message are necessary, otherwise I cannot reply; the form cannot be sent without them. The name is voluntary.

Recipient is my mailbox at Hostinger (see above). If sending fails, you are told so on the page. Your enquiry is kept like an email: I delete it once it is settled and nothing requires me to keep it.

Protection against automated misuse works without any third party: a field that people never see and bots tend to fill in, and a limit on how many messages the form sends per hour and per day. The limit counts all messages together, not per visitor, so no IP address is needed; if it is reached, you are asked to write to me by email directly. There is no captcha service, and nothing is loaded from other servers for it. The script also checks, using the origin information sent by your browser, whether the request comes from this website; this information is not stored.

What is stored on your device

One single entry, and only once you switch the language yourself: this site remembers your choice of German or English under the key sprache in your browser's local storage, so the page does not fall back to the other language on every visit.

That entry holds nothing but the language code. It stays in your browser, is never sent to the server, and you can delete it at any time through your browser settings. Because it is strictly necessary for a function you asked for, it needs no consent under section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) — which is why this site has no cookie banner.

There are no cookies, no analytics, no advertising tools and no profiling.

Nothing is loaded from other servers

Fonts, images, styles and scripts are all delivered from this site's own domain. There is no web font service, no third-party content delivery network, no map, no video embed and no chat widget. The hosting provider delivers the site through its own content delivery network (part of the hosting described above), so your IP address is processed there in the same way as in the server log files. No other company's service is built into the pages.

Encryption

This site is delivered over HTTPS. You can recognise it by the lock symbol in your browser's address bar.

Your rights

You have the right to information about the data held about you (Art. 15 GDPR), to correction (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.

A message to the address above is enough.

You also have the right to complain to a supervisory authority. For this site that is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW); you may equally turn to the authority where you live.

Status of this policy

This policy describes the site as it stands on 20 October 2026. It applies to the website in its current form, without purchase, licence or download processing. Before any such function is offered, the policy will be extended with the information it needs (for example payment provider, order and licence data).