Legal notice and privacy

Information pursuant to Section 18(1) of the German Interstate Media Treaty (Medienstaatsvertrag):

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

This website sets no cookies and stores nothing else in your browser, such as in local storage. There are no analytics, advertising or social media services. Fonts, scripts and images are served by the website itself. Apart from the hosting provider (see below), no data is passed to third parties when you visit.

The website is served via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes the connection data this requires: your IP address, date and time, the URL requested, and information about your browser and operating system. This is necessary to deliver the site and to protect it against attacks and overload.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is delivering the website securely and reliably. I do not analyse this data or combine it with other data. Cloudflare keeps it only as long as these purposes require; details are in Cloudflare’s privacy policy.

Cloudflare acts as a processor under its Data Processing Addendum, which forms part of its terms of service. Data may be transferred to the United States. Cloudflare participates in the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR); the EU Standard Contractual Clauses apply in addition.

Cloudflare privacy policy ↗

If you write to me, I process your email address, your name and the content of your message in order to reply. Where it concerns an internship or other collaboration, the legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract); otherwise it is Art. 6(1)(f) GDPR (my interest in answering enquiries). I delete messages once I no longer need them for our correspondence.

The mailbox is operated by Ostbayerische Technische Hochschule Regensburg, the university where I study.

This website links to my LinkedIn profile. It is not embedded: data is only transferred when you click the link, and from then on LinkedIn’s privacy policy applies.

This privacy policy also covers my project at inditex.moritz-sturm.com. It is likewise served via Cloudflare Pages; the hosting section applies to the connection data. The project sets no cookies and loads no third-party content.

It stores two entries in your browser: your chosen language (local storage, until you delete it) and, for the duration of the session, that the intro animation has already played (session storage). Both serve only the display, are never sent to me and can be deleted in your browser settings. The legal basis is Section 25(2) no. 2 of the German TDDDG.

You have the right to access the personal data I process about you (Art. 15 GDPR), and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on Art. 6(1)(f) GDPR, you may object to it on grounds relating to your particular situation (Art. 21). An email to the address above is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work.

You are not obliged to provide any data. Without the connection data, however, the website cannot be delivered. There is no automated decision-making or profiling.