1. Controller
Alexander Steinmetz
E-mail: [E-Mail wird geladen]

2. Scope
This website is a private page with no commercial offer. It contains no contact form, no appointment booking, no comment function, no registration and no web analytics. No data is processed for advertising purposes.

3. Hosting and server log files
The website is served via GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When pages are requested, the host processes technically necessary connection data, in particular IP address, date and time of access, file requested, volume of data transferred, referrer and details of browser and operating system.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the technically sound provision and the security of the website. This processing is technically unavoidable when operating a website.

Retention follows the host's own rules. We have no access to the host's log data; it is not combined into profiles.

4. Transfers to third countries
GitHub, Inc. is based in the USA, so personal data may be transferred there. GitHub relies on the European Commission's standard contractual clauses and is certified under the EU-US Data Privacy Framework.

5. Cookies and local storage
This website sets no cookies and uses neither local storage nor session storage. No tracking takes place.

6. External links
The page links to external services, including a profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). Data is transmitted to the respective provider only once such a link is clicked. No social media plugins that open connections when the page loads are embedded.

7. Contact by e-mail
If an e-mail is sent to the address above, the data transmitted is processed in order to handle the enquiry. The legal basis is Art. 6(1)(f) GDPR. The data is deleted once the matter has been dealt with and no retention obligations apply.

8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). A message to the address above is sufficient to exercise these rights.

9. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the alleged infringement.

10. No automated decision-making
No automated decision-making, including profiling, takes place.

11. Updates
This policy will be adjusted if the processing changes.