Privacy Policy
Deutsch · English
This is a courtesy translation. In case of any discrepancy, the German version is the authoritative one.
In short
- This is a static website. There are no user accounts, no forms and no comment section.
- No cookies are set and nothing is stored in your browser (no local storage, no session storage).
- There is no analytics and no tracking — no Google Analytics, no Matomo, no tracking pixels, no ad networks.
- Fonts and scripts are served exclusively from this website itself. When you open a page, your IP address is transmitted, as a technical necessity, only to the host (GitHub Pages).
- The map on the "Personal" page is only loaded when you click "Load map". Only then is data transmitted to OpenStreetMap.
1. Controller
The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:
Kevin Kreutz
Togostr. 13
13351 Berlin
Germany
Email: kkreutz@acm.org
No data protection officer has been appointed, as the statutory thresholds for doing so (Art. 37 GDPR, § 38 BDSG) are not met.
2. General information on processing
This website is operated as a static site. That means there is no database, no server-side application logic and no way for visitors to submit input. I do not collect any personal data through this website myself and, in particular, I have no access to my hosting provider's server log files.
Personal data — essentially your IP address — is nevertheless processed, because it is technically necessary for your browser to retrieve the page at all. Sections 5 to 7 describe which parties receive this data.
3. Your rights
You have the following rights against the controller regarding your personal data:
- Access (Art. 15 GDPR) — you may request confirmation of whether, and which, data concerning you is being processed.
- Rectification (Art. 16 GDPR) — you may request that inaccurate data be corrected or incomplete data completed.
- Erasure (Art. 17 GDPR) — you may request deletion of your data, unless a statutory retention obligation applies.
- Restriction of processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR) — you may request your data in a structured, commonly used and machine-readable format.
- Objection (Art. 21 GDPR) — see the highlighted notice below.
- Withdrawal of consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time with effect for the future.
An informal message to kkreutz@acm.org is enough to exercise any of these rights.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other remedy, Art. 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority — in the member state of your habitual residence, your place of work, or the place of the alleged infringement. The authority responsible for the controller is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de
Where processing is based on a legitimate interest under Art. 6(1)(f) GDPR — on this website that covers hosting and the map display — you have the right to object to that processing at any time on grounds relating to your particular situation. The data concerned will then no longer be processed, unless there are compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
4. No cookies, no tracking
This website sets no cookies and stores no information in your browser (neither local storage nor session storage). No analytics services, audience measurement, tracking pixels or advertising networks are used. A cookie banner is therefore not required — not because one has been omitted, but because there is nothing to consent to.
The site's search function runs entirely in your browser: when you open the search, a search index is loaded from this website and queried locally. Your search terms never leave your device and are not logged anywhere.
5. Hosting: GitHub Pages
This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, a subsidiary of Microsoft Corporation.
When you open a page, your browser transmits technically necessary data to GitHub's servers, where it may be recorded in server log files. This typically includes the IP address, the date and time of access, the file requested, the referrer, and browser and operating system identifiers. I have no access to these log files and do not evaluate them.
- Purpose
- Delivery of the website; ensuring stability and security
- Legal basis
- Art. 6(1)(f) GDPR — legitimate interest in the secure and efficient operation of the website
- Third-country transfer
- USA. GitHub is certified under the EU–US Data Privacy Framework; the EU Commission's Standard Contractual Clauses apply in addition.
- Retention
- Determined by GitHub; I have no influence over deletion.
- Privacy policy
- GitHub Privacy Statement
6. Fonts and software libraries
The typeface "Inter" and the software libraries "Fuse.js" (search) and "Leaflet" (map display) are stored on this website's server and served from there. No connection to any further third party is made in the process — in particular not to Google Fonts, jsDelivr or unpkg. Processing is limited to the hosting described in section 5.
7. Map display on the "Personal" page
The /personal/ subpage can display an interactive map. The map is not loaded automatically. Instead, a placeholder with a notice and a "Load map" button is shown first. As long as you do not click that button, no data is transmitted to OpenStreetMap.
Only after the click does your browser load the map imagery — tile images — from tile.openstreetmap.org, a service of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Your IP address and the usual technical details sent by your browser (e.g. user agent, referrer) are transmitted to the OpenStreetMap Foundation in the process. The tiles are delivered via a content delivery network; I have no influence over which servers deliver them in a given case.
The places marked on the map are loaded from a file on this website; the Leaflet mapping library is also served from this website (see section 6).
- Purpose
- Displaying an interactive map
- Legal basis
- Art. 6(1)(f) GDPR — legitimate interest in an illustrative presentation; the transmission only takes place at your explicit request by clicking "Load map"
- Third-country transfer
- United Kingdom (covered by an EU Commission adequacy decision)
- Privacy policy
- OpenStreetMap Foundation
8. Contact by email
This website lists email addresses for getting in touch. There is no contact form. If you write to me, the data you send — your email address, your name if given, and the content of your message — is stored for the purpose of handling your enquiry.
- Legal basis
- Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR — legitimate interest in responding to enquiries
- Retention
- Until the purpose of storage ceases to apply, i.e. the enquiry has been dealt with conclusively, unless statutory retention periods apply
9. External links
This website links to external resources in many places. I have no influence over their content or their data processing; the privacy policy of the respective provider applies to them. A link alone triggers no data transfer — that only happens once you click it.
10. Encryption
This website is served exclusively over a TLS-encrypted connection (HTTPS), which you can verify in your browser's address bar. Requests over HTTP are redirected to HTTPS automatically.
11. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
12. Obligation to provide data
Providing personal data is neither required by law nor by contract. Beyond the transmission of your IP address that is technically necessary to retrieve the page, you do not have to provide any data in order to use this website.
13. Changes to this privacy policy
I update this privacy policy whenever the technology used on this website or the legal situation changes. The version available here is the one that applies.
Last updated: 17 September 2026