Privacy notice

Controller

The controller responsible for the processing described in this notice is:

Dr Fabian Braun
c/o A.IX Capital GmbH
Erkrather Straße 401
40231 Düsseldorf
Germany

You can get in touch through the contact form.

Website hosting

This static website is hosted by GitHub Pages, a service provided by GitHub. When you visit the site, GitHub logs your IP address for security purposes. Technical request data may also include the requested page, date and time, browser information, and referring page.

This processing is necessary to deliver and secure the website. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the reliable and secure operation of this website. I do not receive or evaluate GitHub's server logs.

GitHub may process data in the United States and other countries. GitHub states that it uses the EU–US Data Privacy Framework and, where required, the European Commission's Standard Contractual Clauses for international transfers. Further information is available in GitHub's privacy statement and its GitHub Pages data-collection notice.

GitHub determines how long it retains its server and security data under its own retention rules.

Email newsletter

If you subscribe, the email address you enter is used to send occasional notes on software, systems, and decision-making. Subscribing is voluntary. Your email address is required because the newsletter cannot be delivered without it.

The legal basis is your consent under Article 6(1)(a) GDPR. Buttondown uses double opt-in: after submitting the form, you must confirm the subscription using the link in a confirmation email. The signup and confirmation timestamps, IP address, and referrer may be recorded to operate the service, prevent misuse, and document consent.

The newsletter is provided by Buttondown, LLC, 406 W Franklin St. #201, Richmond, VA 23221, United States. Buttondown processes subscriber data on my behalf and uses subprocessors where necessary to provide the service. Details are available in Buttondown's GDPR information, data processing agreement, and subprocessor list.

Subscriber data is processed in the United States. Buttondown's data processing agreement incorporates the European Commission's Standard Contractual Clauses, Module 2, for transfers from a controller to a processor.

Open and click tracking are not enabled for this newsletter. If that changes, this notice will be updated before such tracking is used and consent will be obtained where required.

Your subscriber data is kept while the subscription is active. You can withdraw your consent at any time by using the unsubscribe link in any newsletter. Withdrawal does not affect processing that took place before it. After an unsubscribe, limited information may be retained where necessary to document the withdrawal, prevent further mailings, comply with legal obligations, or establish, exercise, or defend legal claims. Data is erased when those purposes no longer apply.

There is no automated decision-making or profiling in connection with the newsletter.

Cookies and analytics

This website does not set cookies and does not use advertising technology, externally hosted fonts, or embedded third-party media. The newsletter form sends data to Buttondown only when you submit it.

To see which articles are read and where readers come from, this website counts page views with GoatCounter, a privacy-friendly analytics service. When a page loads, a small script sends the page address, the referring page or campaign tag of the link you followed (such as ?ref=mastodon), your browser and operating system, language, screen width and an approximate location derived from your IP address. GoatCounter stores only aggregated counts. It does not store your IP address, the full browser identification or any tracking ID, and it does not store anything in your browser (no cookies, no local storage). To avoid counting a visitor twice, it keeps a random session ID in memory for up to eight hours. It is not used to identify you or to follow you across websites.

GoatCounter is operated by Martin Tournoij, Ireland. The data is stored on servers of Hetzner Online GmbH in Finland and Germany, so it stays in the EU. Further information is available in GoatCounter's privacy policy.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is understanding which content is useful and which channels readers use. I can delete the collected counts at any time; deleted data may remain in GoatCounter's backups for up to 30 days.

Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction or deletion, restriction of processing, or data portability. You may also object to processing based on legitimate interests and withdraw consent at any time. Use the controller contact above to exercise these rights.

You also have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible in North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

External links

This website links to external websites. No data is sent to those services merely because a normal text link appears here. When you follow a link, the privacy terms of the destination service apply.

Changes to this notice

This notice will be updated when the website's processing changes or legal and service requirements make an update necessary. The date above identifies the current version.