Privacy policy

1. Controller

Kevin Schmid
Kottbusser Damm 29, 10967 Berlin, Germany
Email: kevin.schmid@serviweb.ch
Phone: +49 (0)30 67955986

2. In short

• This website sets no cookies and uses no analytics or tracking tools.
• Fonts and images come from my own server. No third-party content is embedded: no maps, videos, social media plugins or external font services.
• I only process personal data when you visit the website (server log files) and when you write to me through the contact form or by email.

3. Hosting and server log files

This website runs on a server I administer myself, provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The data centre is in Nuremberg, Germany.

Every time a page is requested, the web server automatically records:

• the IP address of the requesting device
• date and time of the request
• the requested address and HTTP status code
• the amount of data transferred
• the previously visited page (referrer)
• browser and operating system (user agent)

This is needed to deliver the website, keep it secure and find errors. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is secure and stable operation. Log files are deleted automatically after 14 days.

4. Contact form and email

When you write to me through the contact form, I process your name, email address, the topic you chose and your message. The form sends this to a service on my own server, which forwards it to me by email. The service itself does not store the message. To prevent abuse, it keeps your IP address in memory for about an hour and allows at most five messages in that time.

Emails to my address, including those from the contact form, are received by the forwarding service Forward Email (Forward Email LLC, Delaware, USA) and forwarded to my Gmail mailbox (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The same applies when you email me directly. Data may be transferred to the USA in the process: for Forward Email on the basis of the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), for Google on the basis of the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Google LLC is certified.

The legal basis is Art. 6(1)(b) GDPR where your enquiry aims at a contract, otherwise Art. 6(1)(f) GDPR; my legitimate interest is answering enquiries. I delete your message once it has been dealt with, unless statutory retention obligations require longer storage, for example for business letters under § 147 AO.

5. Cookies and browser storage

This website sets no cookies. It neither stores information on your device nor reads any from it (§ 25 TDDDG). That is why there is no cookie banner.

6. Links to other websites

The website links to third-party services such as LinkedIn, GitHub, Instagram, the App Store and Google Play. Data is only transferred to these providers when you click such a link. From then on, their privacy policies apply.

7. Your rights

You have the right at any time to

• access the data stored about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

Right to object: where I process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An informal email to kevin.schmid@serviweb.ch is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

8. No automated decisions

I make no automated decisions and create no profiles within the meaning of Art. 22 GDPR.