Privacy Policy

Controller

The controller responsible for data processing on this website is:

Hosting and server log files

This website is hosted by nordroth (Ina Roth), Hamburgstr. 35, 80809 München, Germany. nordroth processes the data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. For this purpose, nordroth uses Uberspace (uberspace.de), based in Germany, as a sub-processor.

When you visit this website, the server automatically stores information that your browser transmits. This includes:

• the page or file requested
• the date and time of access
• the amount of data transferred
• browser type and version
• the operating system used
• the referrer URL (the previously visited page)
• the IP address of the accessing device

In the access logs, the IP address is stored in truncated form. The access logs are deleted after seven days, as is the error log, which contains the full IP address. This data is processed for the secure and stable operation of the website and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

Contact form

This website provides a contact form. The submission is handled by Formward (formward.eu), operated by EGF Fastighetsservice AB, org.nr 559501-3573, Stockholm, Sweden. The provider processes the data in Sweden; the basis is a data processing agreement pursuant to Art. 28 GDPR.

When you submit the form, I process the following information:

• your name
• your email address
• your message

In addition, the provider uses a honeypot and rate limiting based on a hashed IP address to protect the form against spam.

I use this information solely to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at concluding or performing a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

The information is deleted once it is no longer required to handle your enquiry and no statutory retention obligations prevent deletion.

Fonts

The fonts used on this website are loaded locally from the server. When you visit the website, no connection is established to servers of Google (Google Fonts) or other third parties for this purpose.

Cookies and tracking

This website does not use cookies. No analytics, advertising or tracking services are used; your usage behaviour is not evaluated.

Display (light/dark)

If you use the “Dark design” button to choose a different display than your device’s default, I store that choice only locally in your browser (local storage, key fw-theme, value light or dark). It contains no identifier and is not transmitted to me or to any third party; no consent is required under Section 25(2) no. 2 TDDDG, because the storage is strictly necessary to keep the display you chose. You can remove it at any time by switching the button back to your device’s setting or by clearing this site’s data in your browser.

Your rights

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

Last updated

Last updated: October 2026