Privacy policy

This English version is a convenience translation. Where it differs, the German version is authoritative.

This privacy policy explains which personal data is processed when you visit this website, for what purpose and on what legal basis. In short: this site uses no analytics or tracking, sets no cookies that would require consent, and loads nothing from third parties. Personal data arises only as a technical side effect of your visit and when you send me a message.

1. Controller

2. Hosting and server logs

This website is delivered through the infrastructure of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”). Opening a page technically requires your browser to send data to Cloudflare's servers. The following is processed:

• IP address,
• date and time of the request,
• requested URL and referrer URL,
• browser type, browser version and operating system (user agent),
• amount of data transferred and HTTP status code.

Cloudflare processes this data to deliver the site, fend off attacks (such as DDoS) and keep it running securely. The application itself additionally logs requests and errors (date, time, URL, status code); these logs are deleted automatically after a few days. The contents of contact messages are never logged.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure, stable and fast delivery of this website. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare operates a global network, so processing in the USA is possible. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, the EU Commission's standard contractual clauses apply (Art. 46(2)(c) GDPR). See Cloudflare's privacy policy for more.

3. Contact form and email

When you use the contact form I process what you enter: your name, email address and message. The message is delivered as an email to my own mailbox. The mail server is run by me and hosted in a data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, under a data processing agreement pursuant to Art. 28 GDPR.

To prevent automated abuse, your IP address is held briefly in memory when you submit the form, to cap the number of submissions. It is not stored persistently, not logged and not linked to your message.

The purpose is handling your enquiry and communicating with you. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at a contract (such as a project or a position), and otherwise Art. 6(1)(f) GDPR, my legitimate interest in answering enquiries. The same applies when you email me directly.

I delete your data once it is no longer needed to handle your enquiry, unless statutory retention obligations require otherwise.

4. Cookies and local storage

This site sets exactly one cookie. PARAGLIDE_LOCALE stores the language you use the site in (German or English) so that your next visit opens in the same language. It contains no identifier, cannot recognise you across other websites and expires after 400 days. Your choice of light or dark theme is kept in your browser's localStorage under the key theme and never leaves your device.

Both are necessary for a function you explicitly request (§ 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act) and require no consent. No cookies are set for analytics, advertising or tracking. You can delete both entries at any time in your browser.

5. Fonts, third-party content and GitHub activity

Fonts are served by this website itself; no fonts, scripts or other content are loaded from third parties (such as Google Fonts). The GitHub activity shown on the home page is fetched from GitHub by my server and passed on to your browser. Your browser never connects to GitHub, and no data about you is sent to GitHub.

The site links to external services (GitHub, LinkedIn, websites of my employer's clients). When you follow a link you leave this website; the respective provider is responsible for any data processing there.

6. Your rights

Towards me you have the right to

• access the data processed about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

An email to contact@yannic-oberhausen.de is enough to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany, datenschutz.rlp.de. You may also contact the authority where you live.

7. No automated decision-making

There is no automated decision-making, including profiling (Art. 22 GDPR).

8. Changes

I will update this policy when the website or the legal situation changes. The version published here applies; the date of the last change is shown above.