Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Arved Cornelsen, Endenicher Allee 8, 53115 Bonn, Germany
Email: [email protected]

2. Overview

This website does not use any analytics or tracking tools and does not show advertising. Only a single, strictly necessary cookie is set, and only if you choose a colour theme yourself (see section 3a). Fonts are loaded locally from this server. Personal data is only processed in the cases described below.

3. Hosting and server log files

This website is hosted by: Uberspace, Jonas Pasche, Kaiserstraße 15, 55116 Mainz, Germany. When you visit the website, the hosting provider automatically processes data transmitted by your browser (server log files): IP address, date and time of access, page requested, referrer URL, browser type and operating system. This data is technically necessary to deliver the website and to ensure its stability and security.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and functional operation of the website). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

3a. Cookie for the colour theme

If you explicitly choose light or dark mode using the switch in the menu, this setting is stored in a cookie named “theme” (value: “light” or “dark”) for one year. The cookie contains no personal data, is not shared with third parties and is used solely to keep your chosen theme on future visits. If you choose “Auto”, the cookie is deleted. The legal basis is § 25 (2) no. 2 TDDDG (strictly necessary for the service you explicitly requested) in conjunction with Art. 6 (1) (f) GDPR.

4. Contact form

If you use the contact form, the information you provide (name, email address, subject, message) is sent to me by email so that I can process your enquiry. The message is stored in my mailbox with the provider Google (Gmail), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). The data is deleted once your enquiry has been fully processed, unless statutory retention obligations apply.

5. Google Maps

A map from the Google Maps service is embedded on the home page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is loaded directly when the page is opened. In the process, your IP address is transmitted to Google; Google may also set cookies and transfer data to servers of Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework.

The map serves to present my location in an appealing way and to make it easy to find. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). You can object to this processing at any time, for example by blocking third-party content in your browser. Further information: Google privacy policy.

6. Links to social networks

The links to LinkedIn and GitHub are simple links. No data is transmitted to these services before you click a link. After clicking, the privacy policy of the respective provider applies.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). To exercise these rights, please contact the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Last updated: October 2026