Privacy policy

This privacy policy was last changed on June 1, 2021. All changes to it are public, you can review them over at GitHub.

General remarks

Thank you for your interest in my privacy policy. I am glad that you are interested in how I process your data.

I am committed to privacy, so I have designed my websites from the ground up to collect as little data as possible. Furthermore, my websites can only be accessed via a TLS-encrypted connection to ensure that your connection to my server cannot be compromised by third parties.
To exercise your privacy rights, I recommend a service such as datarequests.org which will help you generate the appropriate requests for free.

In this privacy policy, I would like to explain to you what data I collect and what rights you have.

Scope

This privacy policy applies to:

Controller and contact information

The controller as defined in Art. 4(7) GDPR for the services mentioned under “Scope” is:

Benjamin Altpeter
Schreinerweg 6
38126 Braunschweig
Germany

Phone (mobile): +49 176 913 77 604
Fax: +49 531 615 4 288
Email: hi@bn.al (PGP key 0903 DEF9 C683 8D77 4EC7 3A8E 580B 1C78 00EB 2372)
Web: benjamin-altpeter.de

If you have any questions about this privacy policy, believe that I am in violation of data protection laws or wish to assert your rights, please feel free to contact me at any time.

Do Not Track

I respect the Do Not Track (DNT) option that you can set in your browser. I don’t currently employ any tracking but if I ever do in the future, I will disable it if you have set the DNT header.

I also recommend that you install Privacy Badger, a free and open source browser extension that sets the DNT header for you and automatically blocks websites that do not adhere to it.

Profiling

I do not use profiling or any other type of automated decision making.

Collected data

To operate my website, I collect and process some personal data. My top priority is to minimise data collection and processing: I only collect personal data where it is necessary and only to the extent that it is necessary. In addition, data is always collected for a specific purpose and storage is limited to the necessary period of time.

In this section I would like to explain to you exactly under which circumstances I collect and process which data.

Data I collect automatically

Server connection data

When you visit one of my websites, your browser connnects to one or more of my servers. I have configured all my servers not to save log files, but I do need to process some data in memory for a short while to serve your request.

  • Affected data: the specific page you visited, the date and time of your visit, the data your browser sends with the request (the so-called “headers”), including information about your browser and operating system (the so-called “user-agent string”), and your IP address
  • Lawful basis: The brief processing of this data is necessary to offer my websites to you, it is based on Art. 6(1) lit. b GDPR.
  • Duration of storage: none
  • Data disclosure: My servers are operated by the following companies:
    • Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (privacy policy)

Data you provide to me

Contacting me

If you contact me (e.g. by email), your message may contain personal data. I will use this data exclusively to answer your message.

You do not have to provide any data to contact me, so the disclosure of this data is completely voluntary for you.

  • Affected data: the data you include in your message
  • Lawful basis: The storage is based on my legitimate interest in replying to your message in accordance with Art. 6(1) lit. f GDPR.
  • Duration of storage: as long as there are legal storage obligations

Your rights

The GDPR grants you comprehensive rights with regard to data protection. I am strongly convinced that the right to data protection is a fundamental right and therefore I fully stand behind these rights. You can exercise these rights at any time in an informal manner using the contact details given in the “Controller and contact information” section.
You can also use a generator like datarequests.org which will assist you with writing requests.

Right to data access

According to Art. 15 GDPR, you first of all have the right to request confirmation as to whether I store personal data on you. If so, you may request a copy of this information and are furthermore entitled to the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Right to data portability

In accordance with Art. 20 GDPR, you also have the right to receive the personal data concerning you that you have made available to me in a structured, commonly used and machine-readable format and to transmit this data to another controller without obstruction by me if the processing is based on consent pursuant to Art. 6(1) lit. a GDPR, Art. 9(2) lit. a GDPR or on a contract pursuant to Art. 6(1) lit. b GDPR and the processing is carried out using automated procedures.

Right to rectification

According to Art. 16 GDPR, you have the right to request me to correct any inaccurate personal data concerning you without undue delay. Furthermore, you have the right to request the completion of incomplete personal data—also by means of a supplementary declaration.

Right to erasure (“Right to be forgotten”)

According to Art. 17 GDPR, you have the right to demand that I delete personal data concerning you without undue delay.

This right is limited in particular when the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation or to assert, exercise or defend legal claims.

According to Art. 7(3) GDPR you have the right to revoke your consent given to me at any time.

Right to restriction of processing

According to Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if you dispute the accuracy of the personal data, if the processing is unlawful, if I no longer need the data for the purpose of processing or if you have filed an objection to the processing pursuant to Art. 21(1) GDPR, as long as it is not yet clear whether my legitimate interests outweigh yours.

Right to notification to recipients

If you request me to correct, delete or restrict the processing of your personal data in accordance with Articles 16, 17 and 18 respectively, I will notify all recipients to whom I have disclosed the relevant data in accordance with Art. 19 GDPR.

Right to object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you which is necessary for the performance of a task in the public interest or because of my legitimate interest on the basis of Article 6(1) lit. e or f respectively, for reasons arising from your particular situation. I will then no longer process the personal data, unless I can prove compelling legitimate grounds for the processing, which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defense of legal claims.

If I use your personal data for direct marketing, you have the right to object to such processing at any time. I will then no longer use your data for such purposes.

Right to lodge a complaint with a supervisory authority

According to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the member state of your usual place of residence, your workplace or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates the GDPR.

The following supervisory authority is responsible for me:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany

Phone: +49 511 120 4500
Fax: +49 511 120 4599
Email: poststelle@lfd.niedersachsen.de (PGP key)
Web: www.lfd.niedersachsen.de