Privacy Policy (Datenschutzerklärung)

Last updated: [date of publication]

1. Controller

Kevin Schwutke
Landshuter Allee 39
80637 München (Munich)
Germany
Email: contact@kevinschwutke.com

2. Principles

This website is a static, personal information page. It sets no cookies, uses no analytics or tracking services and has no contact forms. Fonts are served locally from this server; no connection to Google Fonts is made.

3. Hosting and server log files (Cloudflare)

This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you access the website, Cloudflare processes technically necessary data, in particular your IP address, date and time of access, the page or file requested, referrer URL, browser type and version, and operating system. This is required to deliver the website, to ensure its security and stability, and to defend against attacks.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in providing the website securely and reliably. A data processing agreement (Data Processing Addendum) pursuant to Art. 28 GDPR is in place with Cloudflare. The retention period of the log data is determined by Cloudflare’s specifications [check retention period].

Personal data may be transferred to the USA in this context. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). In addition, Cloudflare relies on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information: cloudflare.com/privacypolicy.

4. Contact by email

If you contact me by email, the information you provide (email address, name, content of the message) is processed to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding) or Art. 6(1)(b) GDPR if the enquiry relates to a contract. The data is deleted as soon as it is no longer required for handling the enquiry and no statutory retention obligations apply.

Emails to contact@kevinschwutke.com are forwarded via Cloudflare Email Routing to a mailbox at Google (Gmail). The provider for users in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing in the USA is possible. Google is certified under the EU-U.S. Data Privacy Framework. [check that forwarding is set up this way]

5. External links

This website contains links to external services (e.g. LinkedIn, press articles). Merely visiting this website does not transfer any data to these providers. Only when you click a link do the privacy policies of the respective provider apply.

6. SSL/TLS encryption

For security reasons, this website uses TLS encryption (recognisable by “https://” in the address bar).

7. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). To exercise these rights, please use the email address above.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.