Privacy Policy

General information

This website can be used without registering or entering personal data. When you access it, the server nevertheless processes technical connection data, including your IP address. Comments are optional and load only after consent.

The website does not use tracking, analytics, marketing services, or contact forms.

Controller

The controller responsible for processing personal data on this website is Thomas Weitzel. Contact details are available in the imprint.

Hosting and server logs

The website and the Artalk comment service are hosted by netcup GmbH, Daimlerstr. 25, 76185 Karlsruhe. Data for these services are stored in Nuremberg, Germany. I have concluded a data-processing agreement with netcup under Art. 28 GDPR. Details are available in netcup's privacy policy.

When you access the website, the web server processes the following information:

  • IP address
  • date and time of the request
  • requested URL
  • HTTP status code
  • referrer URL
  • browser and operating system information

This processing protects the site, detects faults and abuse, and keeps the service available. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website. Apache access and error logs are retained for up to 30 days.

Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR. Please use the contact details in the imprint. I will examine the objection under Art. 21 GDPR.

Optional comments

Comments are optional. Artalk, the comment system, loads only after you give consent through the checkbox below a post. Artalk runs on this website at weitzel.dev/comments; it does not use third-party analytics, Gravatar, email delivery, or spam-checking services.

When you submit a comment, Artalk stores the name, email address, password as a cryptographic hash, optional website URL, comment text, time of submission, IP address, browser User-Agent, and vote count. Comments may be reviewed and moderated before publication.

Your name, comment text, submission time, and, if supplied, website URL are publicly visible. Artalk displays the website URL as a link from your name. Your email address, password hash, IP address, and User-Agent are not publicly displayed.

The comment data support publication, authentication, moderation, and protection against abuse. The legal basis is your consent under Art. 6(1)(a) GDPR. The consent checkbox is how you give that consent.

Comments and their associated data, including IP address and User-Agent, remain stored until you request deletion or anonymisation, unless legal retention obligations require longer storage.

You can withdraw consent at any time with effect for the future. Clear this site's browser data to stop local storage and prevent Artalk from loading automatically. To delete or anonymise a published comment or comment account, use the contact address in the imprint.

Cookies and browser storage

This website does not use cookies.

The site follows the operating system's color-scheme preference through CSS and does not store a display preference. After consent, the browser stores a local consent marker. Artalk may also store form information, drafts, and technical session information in localStorage so that you do not need to enter them again. No information is sent to Artalk before it loads after consent.

The legal basis for this browser storage is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

Email contact

If you contact me by email, I process your email address and the content of your message to answer your request. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is responding to legitimate enquiries. I retain correspondence for as long as necessary to handle the request, normally for up to one month afterwards and no longer than six months after the request is resolved, unless legal retention obligations require longer storage.

Email sent to an @weitzel.dev address reaches a mail server that I operate on netcup infrastructure in Nuremberg, Germany.

This website does not embed external content or load third-party fonts, analytics, advertising, or tracking services. Its scripts, stylesheets, images, and other site resources are served locally.

Links to external websites, such as GitHub or Mastodon, open services operated by their respective providers. Their privacy policies apply when you follow those links.

HTTPS/TLS encryption

This website uses HTTPS with TLS encryption. TLS protects data while it travels between your browser and this website.

Your rights

You have the right to:

  • access to stored personal data
  • correction or deletion
  • data portability where applicable
  • restriction of processing
  • withdraw consent with effect for the future
  • object to processing based on Art. 6(1)(f) GDPR

Requests can be sent through the contact details in the imprint.

Supervisory authority and right to file a complaint

You may lodge a complaint with the Hessian Commissioner for Data Protection and Freedom of Information, or another competent data-protection authority.

Last updated: October 5, 2026