This privacy policy may be outdated as Europe's highest court has ruled that the Privacy Shield is invalid. (16.07.2020)

Personal data (hereinafter mostly referred to as "data“) will only be processed by me to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the GDPR), "processing" refers to any operation or set of operations such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under my own control or in conjunction with others. I also inform you below about the third-party components I use to optimise my website and improve the user experience which may result in third parties also processing data they collect and control.

My privacy policy is structured as follows:

1. Information about me as controllers of your data
2. The rights of data subjects
3. Information about the data processing

1. Information about me as controllers of your data

The party responsible for this website (the "controller") for purposes of data protection law is:
Donovan Ludwig
Güldenhofer Ufer 10
12437 Berlin
Germany
E-Mail: mail@donludwig.de

Note on data transfer to the USA
Among other things, my website includes tools from companies based in the USA. If these tools are active, your personal data may be transferred to the US servers of these companies. I would like to point out that the USA is not a safe third country in terms of EU data protection law. US companies are obliged to release personal data to security authorities without you as the person concerned being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for monitoring purposes. I have no influence on these processing activities.

2. The rights of data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

• to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
• to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
• to the immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
• to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
• to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, the user has a right to information about these recipients.

Likewise, under Art. 21 GDPR,  data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

3. Information about the data processing

Your data processed when using my website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any legal storage obligations and no other information on individual processing methods is provided below.

Server data

For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to me or to my webspace provider. These so-called server log files are used to record, among other things, the type and version of your Internet browser, the operating system, the website from which you have switched to my Internet presence (referrer URL), the website(s) of my Internet presence that you visit, the date and time of the respective access and the IP address of the Internet connection from which the use of my Internet presence takes place.

This data is temporarily stored, but not together with other data about you.
This storage takes place on the legal basis of Art. 6 Para. 1 lit. f) GDPR.
My legitimate interest lies in the improvement, stability, functionality and security of my internet presence.
The data will be deleted after seven days at the latest, unless further storage is required for evidential purposes. Otherwise, the data are completely or partially excluded from deletion until the final clarification of an incident.

Cookies

I use cookies on my website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes my website more friendly, efficient, and secure, allowing me, for example, to display my website in different languages or to offer a shopping cart function in the future.
The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, my legitimate interest lies in improving the functionality of my website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
When you close your browser, these session cookies are deleted.

You can prevent or restrict the installation of cookies by adjusting your Internet browser settings. You can also delete already stored cookies at any time. However, the steps and measures required for this depend on the Internet browser you are actually using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. Should you prevent or restrict the installation of cookies, however, this may mean that not all functions of my website can be used to their full extent.

Contact enquiries / Contact possibility

If you contact me via contact form or e-mail, the data you provide will be used to process your request. The information you provide is necessary to process and answer your inquiry - without the provision of this information, I cannot answer your inquiry or can only answer it to a limited extent.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once I have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Social-Media linking via graphic or text link

I also advertise on my website presence on the social networks listed below. The integration takes place via a linked graphic of the respective network. By using this linked graphic, it is prevented that when a website with a social media application is called up, a connection is automatically established to the respective server of the social network to display a graphic of the respective network itself. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective social network.

After the user is forwarded, information about the user is collected by the respective network. It cannot be excluded that the data collected in this way is processed in the USA.

This is initially data such as IP address, date, time and visited page. If the user is logged into his user account of the respective network during this time, the network operator may be able to assign the collected information of the user's specific visit to the user's personal account. If the user interacts via a "share" button of the respective network, this information can be stored in the user's personal user account and published if necessary. If the user wants to prevent the collected information from being directly assigned to his user account, he must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.

The following social networks are at the moment or will be integrated into my site by linking:

I maintain an online presence on Twitter to present me and my services and to communicate with customers/prospects. Twitter is a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

I would like to point out that the possibility exists that user data may be processed outside the European Union, in particular in the USA. This may increase the risks for users in that, for example, it may make it more difficult to access the user data at a later date. I also have no access to this user data. The access possibility lies exclusively with Twitter. Twitter Inc. is certified under the Privacy Shield and has thus committed itself to comply with European data protection standards.

Twitter on privacyshield.gov.
The privacy policy of Twitter can be found at twitter.com/privacy.

I maintain an online presence on Pinterest to present me and my services and to communicate with customers/prospects. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

I would like to point out that the possibility exists that user data may be processed outside the European Union, in particular in the USA. This may increase the risks for users in that, for example, it may make it more difficult to access the user data at a later date. I also have no access to this user data. The access possibility lies exclusively with Pinterest. Pinterest Inc. is certified under the Privacy Shield and has thus committed itself to comply with European data protection standards.

Pinterest on privacyshield.gov.
The privacy policy of Pinterest can be found at policy.pinterest.com.

I maintain an online presence on Instagram to present me and my services and to communicate with customers/prospects. On this social media platform, Instagram is jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Dublin, Ireland.

I would like to point out that the possibility exists that user data may be processed outside the European Union, in particular in the USA. This may increase the risks for users in that, for example, it may make it more difficult to access the user data at a later date. I also have no access to this user data. The access possibility lies exclusively with Instagram.

The privacy policy of Instagram can be found at help.instagram.com.

I maintain an online presence on LinkedIn to present me and my services and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

I would like to point out that the possibility exists that user data may be processed outside the European Union, in particular in the USA. This may increase the risks for users in that, for example, it may make it more difficult to access the user data at a later date. I also have no access to this user data. The access possibility lies exclusively with LinkedIn. LinkedIn Ireland Unlimited Company is certified under the Privacy Shield and has thus committed itself to comply with European data protection standards.

LinkedIn on privacyshield.gov.
The privacy policy of LinkedIn can be found at linkedin.com/legal/privacy-policy.

Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden
The privacy policy of Spotify can be found at spotify.com/us/legal/privacy-policy.

EyeEm Mobile GmbH, Kohlfurter Str. 41/43, 10999 Berlin, Germany
The privacy policy of EyeEm can be found at eyeem.com/privacy.

VeraSafe Ireland Ltd., Unit 3D North Point House, North Point Business Park, New Mallow RoadCork T23AT2P, Ireland
The privacy policy of EyeEm can be found at policy.medium.com

Matomo (formerly: PIWIK)

My website uses Matomo (formerly: PIWIK). This is an open source software with which I can analyze the use of my website. Data such as your IP address, the pages you visit, the website from which you came (referrer URL), the duration of your visit, and the frequency of your visits is processed.

Matomo stores a cookie on your device via your browser in order to collect this data. This cookie is valid for one week.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the analysis and optimisation of my website.
However, I use Matomo with the function "Automatically anonymise visitor IPs“.
This anonymization function shortens your IP address by two bytes, making it impossible to assign it to you or the Internet connection you use.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.
In addition, you have the option of terminating the analysis of your usage behaviour by means of the so-called opt-out:

A cookie is stored on your device via your browser to prevent any further analysis.
Please note, however, that you have to click the above link again if you delete the cookies stored on your end device.

Google Maps

The website uses Google Maps to display my location and to provide directions.
This is a service provided by Google Ireland Limited, Gordon Homee, Barrow Street, Dublin 4, Ireland (hereinafter: Google).
Through certification according to the EU-U.S. Privacy Shield.

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.
To enable the display of certain fonts on my website, a connection to the Google server in the USA is established whenever my website is accessed.

If you access the Google Maps components integrated into my website, Google will store a cookie on your device via your browser. Your user settings and data are processed to display my or other locations and create a route description. I cannot prevent Google from using servers in the USA.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in optimising the functionality of my website.

By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

In addition, the usage of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Service and the Terms and Conditions for Google Maps.
Google also offers further information at their Privacy Policy.

YouTube

I use YouTube on my website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".
YouTube is a subsidiary of Google Ireland Limited, Gordon Homee, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

Through certification according to the EU-U.S. Privacy Shield.
Google and its subsidiary YouTube guarantee that they will follow the EU's data protection regulations when processing data in the United States.

YouTube is running on my website in advanced privacy mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in improving the quality of my website. According to YouTube, the extended data protection mode means that the data specified below are only transferred to the YouTube server when you actually start a video.
Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of my webpages on which a YouTube video is embedded. This connection is required in order to be able to display the respective video on my website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.

If you are logged in to YouTube when you access my website, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting my website or make the appropriate settings in your YouTube account.

For the purpose of functionality and analysis of user behaviour, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

Further information about the collection and usage of data as well as your rights and protection options in Google's privacy policy.