Privacy

Information on the processing of personal data under Article 13 GDPR.

1. Controller

No data protection officer has been appointed. The thresholds in Article 37 GDPR and section 38 BDSG are not met.

2. What this site does not do

Stated plainly, because it removes most of what a privacy policy usually has to cover:

• No cookies are set. There is no cookie banner because there is nothing to consent to.
• No analytics, no tracking pixels, no advertising or profiling of any kind.
• No contact form. The contact route is a plain email address.
• No user accounts, no logins, no newsletter.
• No third-party embeds, and nothing is fetched from another company's domain. Fonts are served from this domain, so no font provider receives your IP address. The pages themselves are delivered by the hosting and content-delivery processors named in section 4.
• No automated decision-making within the meaning of Article 22 GDPR.

3. Visiting this website

To send you a page, the hosting and content-delivery providers necessarily process your IP address. Without it a response cannot be routed back to you. Alongside it they handle the ordinary technical detail of a web request: the time, the address requested, the response status, and the browser and referrer your browser chooses to send. Nothing beyond that is collected, and none of it is used to build a profile of you.

Legal basis: Article 6(1)(f) GDPR. The legitimate interest is delivering a functioning, secure website.

Retention: the hosting provider's data processing agreement states that it does not store personal data relating to website visits. The content-delivery sub-processor is capable of retaining request logs for a short period as part of operating the network; no such logs are made available to us, and we neither receive nor analyse them.

4. Hosting

This site is hosted by:

The provider acts as a processor under Article 28 GDPR on the basis of a data processing agreement. It engages two sub-processors, both within the European Union:

• Hetzner Online GmbH, Germany, for data centre infrastructure.
• BunnyWay d.o.o., Slovenia, for content delivery.

Both sub-processors are established in the European Union, and both the contracting party and the data centre infrastructure are within it. Content delivery runs over a global edge network, so a request made from outside the European Union may be served by an edge location in that region. Where that happens, the transfer rests on the standard contractual clauses in the provider's data processing agreement.

5. Contacting us by email

If you write to the address given above, your message, your email address and any details you choose to include are processed in order to answer you.

Legal basis: Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps, otherwise Article 6(1)(f) GDPR on the legitimate interest in responding to enquiries.

Retention: correspondence is kept for as long as needed to deal with your enquiry and any follow-up, then deleted, unless statutory retention periods under commercial or tax law require otherwise.

Writing to us is entirely voluntary and no statute or contract obliges you to. The only consequence of not doing so is that we have no address to answer at.

Email is not an inherently secure channel. Please do not send confidential or export-controlled technical information by unencrypted email.

6. Your rights

Under the GDPR you have the right to:

• access your personal data (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• restrict processing (Article 18);
• data portability (Article 20);
• object to processing based on Article 6(1)(f), at any time and on grounds relating to your particular situation (Article 21).

To exercise any of these, write to jochen+industryforge@jochens.biz.

7. Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Article 77 GDPR). The competent authority for this controller is the Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Changes to this notice

This notice reflects the site as it stands. If the site later adds a form, an embedded scheduler, analytics or any third-party resource, this notice is updated before that change goes live, not after.

Back to home