Privacy Policy

Controller

Responsible for the processing of personal data:

• Christian Erben
• Traminerweg 9
• 68309 Mannheim
• Germany
• Email: christian.erben@degit.de
• Phone: +49 151 65172525

Data Protection Officer

No Data Protection Officer has been appointed, as this is not required under Art. 37 GDPR.

Contact Form

This form processes data (name, e-mail, message) solely to reply to your request. Basis: consent / contract performance (Art. 6 GDPR lit. a & b).

Use of Third-Party Services

This site is hosted by Cloudflare; I do not have direct access to server logs or your IP address there. For the contact form, I use Resend to send emails. Only the data you enter into the form is forwarded – no other personal data is stored.

Log retention: max. 30 days

• Cloudflare: 101 Townsend St, San Francisco, CA 94107, USA
  Cloudflare Germany GmbH: Rosental 7, c/o Mindspace, 80331 München, GermanyLegal basis: legitimate interests (Art. 6(1)(f) GDPR) to ensure website performance and security.
  Cloudflare is certified under the EU-U.S. Data Privacy Framework and processes data under its principles. See: https://www.cloudflare.com/privacypolicy/.
• Resend: 2261 Market Street #5039, San Francisco, CA 94114, USALegal basis: performance of a contract (Art. 6(1)(b) GDPR), as Resend sends emails on your behalf.
  Resend’s DPA includes Standard Contractual Clauses (SCC) for transfers to the US. See: https://resend.com/legal/dpa.

Legal Basis & International Transfers

Cloudflare processes data under legitimate interests (Art. 6(1)(f) GDPR) and is certified under the EU-US Data Privacy Framework (see https://www.cloudflare.com/privacypolicy).

Resend acts on contract performance (Art. 6(1)(b) GDPR) and uses Standard Contractual Clauses for US transfers (see https://resend.com/legal/dpa).

Cookies and Local Storage

I do not use cookies. Only your language choice and theme preference are stored locally in your browser’s localStorage. The storage of theme preferences and language selection in localStorage is based on legitimate interests (Art. 6(1)(f) GDPR) to enhance user experience. You can clear this at any time in your browser settings.

External Links

The site contains links to LinkedIn and Xing. Since I embed no external content, clicking these links may transfer you to the respective platforms, whose privacy policies then apply.

Data Security

I take reasonable technical and organizational measures to protect your data against unauthorized access and loss. However, internet-based data transmission can never be 100% secure.

Technical and Organisational Measures: this site uses TLS 1.3 (if supported by your browser), access controls with MFA, pseudonymisation/encryption at rest, and regular security audits.

Data Subject Rights

Data subjects have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object (Art. 21), and withdraw consent at any time (Art. 7(3)). These rights can be exercised by contacting christian.erben@degit.de.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, e.g.: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany; Tel. +49 711 615541-0; poststelle@lfdi.bwl.de.

Automated Decision-making

No automated decision-making or profiling takes place in these processing operations (Art. 22 GDPR).

Changes to This Privacy Policy

I may update this Privacy Policy at any time. The current version is published here with the date of last revision.