Privacy Policy

German law requires this page. The legally binding version is the German one at /de/blog/datenschutz/. The English text below is for information only.

Controller

The controller for the personal data processed on this site is:
Katrin Geske
Einbecker Str. 22
10317 Berlin
Germany
Email: katrin.geske@proton.me

Hosting

The blog is hosted on servers operated by STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) in Germany. A data processing agreement under Art. 28 GDPR is in place with Strato.

Server logs

When you visit this site, the web server automatically records technical information in server log files:

• IP address of the requesting device
• date and time of the request
• requested URL
• HTTP status code and amount of data transferred
• referrer URL (if sent by the browser)
• browser type and operating system (user agent)

This data is processed for the technical operation and security of the site. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in stable and secure operation of the site). The logs are not merged with other data sources and are deleted automatically after a short period.

Contact form (Tally)

The About page embeds a contact form provided by Tally (Tally B.V., Belgium, tally.so). Tally is based in the EU and hosts its data in the EU.

When you load the form, your browser loads a script and an iframe from tally.so. This transmits your IP address to Tally. When you submit the form, the information you entered (e.g. name, email address, message) is forwarded by Tally to me.

The legal basis is Art. 6 (1) (b) GDPR (handling your inquiry) or Art. 6 (1) (f) GDPR (legitimate interest in an easy way to be contacted). According to its own documentation, Tally provides a data processing agreement under Art. 28 GDPR (see Tally DPA and Tally privacy policy).

Share buttons (LinkedIn, email, copy link)

Each post has links to share it on LinkedIn or by email, plus a button to copy the post's link. These are plain links, not the official sharing widgets of those services. Merely viewing a post does not transmit any data to LinkedIn. Only when you click the LinkedIn link are you redirected to that service, where its own privacy policy applies. The copy-link button runs entirely in your browser and sends no data to anyone.

Cookies and tracking

This site uses Matomo, a self-hosted analytics tool running on our own server in Germany. Without your consent, no analytics cookies are set and no usage data is collected. If you consent via the cookie notice, Matomo sets cookies and processes how you use the blog. Your IP address is stored in truncated form (the last two bytes are masked). Which cookies are set, and how long they last, is described in the Analytics section below. No data is shared with third parties or transferred to the US. If you submit the Tally form, Tally may use technical cookies while running the form; see Tally's privacy policy for details.

Analytics (Matomo)

We use Matomo, self-hosted on our own server in Germany, to analyse how the blog is used. Processing takes place only on the basis of your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Matomo records your truncated IP address, the pages you visit, and the referrer URL, among other things. Your IP address is stored anonymised: the last two bytes are masked. No data is shared with third parties or transferred to the US.

The raw visit data is deleted automatically after 180 days. Aggregated statistics are deleted after 12 months; a few basic metrics such as visits and page views per month are kept beyond that.

If you consent, Matomo stores the following cookies in your browser:

• _pk_id: recognises returning visitors. Expires after about 13 months.
• _pk_ses: keeps the current session together. Expires after about 30 minutes.
• mtm_consent_removed: set only when you withdraw your consent, so that your withdrawal is respected. It is not used for analytics. Expires after about 13 months.

In addition, the blog remembers your choice from the cookie notice in your browser's local storage under the key konnek-analytics-consent. This is not a cookie and is not used for analytics. It stays stored until you delete it or withdraw your consent.

You can withdraw your consent at any time with effect for the future. Withdrawing stops collection immediately and deletes the Matomo cookies already set. The cookie notice will appear again on your next visit.

Withdraw consent

Fonts

Fonts are served from this site's own server, not from an external CDN. No data is transferred to third parties just to load the fonts.

See the open source page for the fonts used and their licenses.

RSS feed

The blog's RSS feed is available at /de/blog/rss.xml and /en/blog/rss.xml. Requesting the feed produces the same server logs described above.

Your rights

You have the right to access the data stored about you, to have it corrected or deleted, to restrict its processing, to object to processing, and to data portability. An informal email to katrin.geske@proton.me is enough.

You also have the right to file a complaint with a data protection supervisory authority. In Berlin this is the Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de).