Privacy policy

The following privacy policy explains the type, scope, and purpose of the processing of personal data on our website. This policy complies with the strict requirements of the European General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

I. Name and Contact Details of the Controller The party responsible for this website (the “Controller”) for purposes of data protection law is:

Christian Kohler
Lenggrieser Str. 11
81371 München
Germany

Email: chris@chriskohler.net

II. Information on Data Processing

1. Server Log Files & Hosting When you visit our website, your browser automatically transmits certain technical data to our hosting provider. This data is temporarily stored in server log files.

  • Processed Data: IP address, date and time of the request, browser type and version, operating system, and the website from which access was made (referrer URL).

  • Purpose: To ensure a smooth connection, evaluate system security and stability, and for administrative purposes.

  • Legal Basis: Art. 6 Para. 1 lit. f GDPR (Legitimate Interest).

  • Hosting Provider: Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We have concluded a Data Processing Agreement (DPA) with STRATO to ensure your data is processed strictly in accordance with GDPR guidelines.

2. Content Delivery Network (CDN) & Caching To optimize the loading speed and security of our website, we use the caching and performance service NitroPack, which utilizes the Cloudflare Content Delivery Network (CDN).

  • Processed Data: When you access our site, your requests are routed through Cloudflare’s servers. This requires the processing of your IP address to defend against malicious attacks (like DDoS) and to serve cached media quickly.

  • Legal Basis: Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure, fast, and economically viable operation of our website.

  • Cookies: NitroPack sets a single, strictly necessary technical cookie (nitroCachedPage) that expires at the end of your browsing session. Under § 25 TDDDG, this functional cookie does not require active consent.

3. Contact Form and Email Communication If you send us inquiries via our contact form (powered by WPForms) or by email, your details, including the contact data you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

  • Processed Data: Name, email address, and the content of your message.

  • Purpose: Responding to user inquiries.

  • Legal Basis: Art. 6 Para. 1 lit. b GDPR (if the request relates to the fulfillment of a contract or pre-contractual measures) or Art. 6 Para. 1 lit. f GDPR (our legitimate interest in responding to inquiries).

4. Data Backups To ensure the security and integrity of our website data, we regularly create backups using the UpdraftPlus plugin.

  • Processing: Backups (which may contain database information such as contact form submissions) are stored locally on our secure STRATO FTP servers, with redundant, encrypted backups sent to Google Drive.

  • Processor: Google Cloud EMEA Limited, Ireland. The data transfer is secured by standard contractual clauses and Google’s compliance frameworks.

  • Legal Basis: Art. 6 Para. 1 lit. f GDPR (Legitimate interest in data security and loss prevention).

5. Embedded Media & Local Fonts All portfolio assets, including images, videos, and audio files, are hosted locally on our own servers. We do not use third-party embeds (such as YouTube or SoundCloud) that track your behavior. Furthermore, all web fonts are hosted locally; no connection is established to Google’s servers to load typography.

III. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You can request confirmation as to whether data concerning you is being processed, as well as a copy of that data.

  • Right to Rectification (Art. 16 GDPR): You have the right to request the immediate correction of incorrect or incomplete data.

  • Right to Erasure (Art. 17 GDPR): You can request the deletion of your data, provided no legal retention periods apply.

  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to restrict the processing of your data under certain conditions.

  • Right to Data Portability (Art. 20 GDPR): You have the right to receive the data you provided to us in a structured, commonly used, and machine-readable format.

  • Right to Object (Art. 21 GDPR): You may object to the future processing of your data at any time, especially concerning direct marketing.

  • Right to Complain (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.