Privacy Policy

Last updated: June 2026

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the imprint of this website.

How do we collect your data?

Your data is collected in part by you providing it to us. This may include data you send us by email.

Other data is automatically collected or collected with your consent by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data.

2. Hosting

This website is hosted by:

1blu GmbH
Riedemannweg 60
13627 Berlin
Germany

The provider collects the following data in so-called log files: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of server request, and IP address.

The hosting is based on our legitimate interests in a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

Information about the responsible party

The responsible party for data processing on this website is:

Stefan Lohmaier
Weitlstr. 103
80935 Munich
Germany

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Data Protection Officer

No data protection officer has been appointed. There is no obligation to appoint one under Art. 37 GDPR or § 38 BDSG, as fewer than 20 persons are permanently engaged in the automated processing of personal data.

Storage Duration

Unless a more specific storage period is specified within this privacy policy, your personal data will remain with us until the purpose for data processing ceases to exist. If you assert a legitimate deletion request or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or place of the alleged violation. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
https://www.lda.bayern.de

No Automated Decision-Making

No automated decision-making, including profiling pursuant to Art. 22 GDPR, takes place.

4. Data Collection on This Website

Cookies

This website sets no cookies at all — neither strictly necessary ones nor cookies for analytics, tracking, or marketing. There is therefore nothing to consent to, and no cookie banner is shown.

The only information stored on your device is your theme preference (light or dark mode), kept in your browser’s local storage under the key theme. It stays on your device, is never transmitted to any server, and is read only to display the page in the appearance you chose. Storing it is strictly necessary for the display setting you expressly requested and is therefore exempt from consent under § 25 (2) no. 2 TDDDG. Your chosen language comes from the page URL (for example /de/) and is not stored.

Embedded YouTube videos and Spotify playlists load only after you actively click them; cookies may then be set by those providers. See the sections on external services below.

You can configure your browser to inform you about cookie settings and only allow cookies on a case-by-case basis, exclude acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser.

Contact by Email

This website does not use a contact form. If you send us inquiries by email, your information, including the contact details you provide, will be stored by us for processing the inquiry and in case of follow-up questions.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 para. 1 lit. f GDPR).

Fonts

This website uses self-hosted fonts (via @fontsource). No external font CDNs (such as Google Fonts) are loaded. Your IP address is never transmitted to third-party font providers.

GitHub API (build time)

The tech page displays information about open source projects that is fetched from the GitHub API at build time. No connection to GitHub is made when you visit the website — the data is embedded statically into the page.

YouTube Videos

Some posts embed videos from YouTube (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Videos are only loaded after you actively click “Load Video” (two-click solution). Before your consent, no connection to YouTube or Google is established — not even preview thumbnails. Only after the click does your browser connect to YouTube’s servers, transmitting your IP address and possibly further data to Google, and cookies may be set. We use the more privacy-friendly domain youtube-nocookie.com. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 (1) TDDDG). Data may be transferred to the USA. For more information, see Google’s privacy policy.

Spotify Playlists

Some posts embed playlists from Spotify (provider: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden). The embed also uses a two-click solution: the player is only loaded after you actively click “Load Playlist”. Before your consent, no connection to Spotify is established. Only afterwards are your IP address and possibly further data transmitted to Spotify, and cookies may be set. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 (1) TDDDG). For more information, see Spotify’s privacy policy.

5. Your Rights

Right to Information

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and further information in accordance with Art. 15 GDPR.

Right to Rectification

You have the right to request immediate correction of inaccurate personal data concerning you (Art. 16 GDPR).

Right to Deletion

You have the right to request immediate deletion of personal data concerning you, provided one of the reasons listed in Art. 17 GDPR applies.

Right to Restriction of Processing

You have the right to request restriction of processing if one of the conditions set out in Art. 18 GDPR is met.

Right to Data Portability

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (Art. 20 GDPR).

Right to Object

You have the right to object at any time to the processing of personal data concerning you that is based on Art. 6 para. 1 lit. e or f GDPR, for reasons arising from your particular situation (Art. 21 GDPR).

This privacy policy was last updated in June 2026.