This is a translation for convenience. In case of doubt the German version prevails, as the requirements follow German law.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Dominik Hellweg, reachable by email at dominik.hellweg@protonmail.com or via github.com/denssle.
This is a private site with no commercial purpose: it advertises no services, accepts no orders and is not monetised. German law therefore does not require a provider identification (Impressum) for it.
What this site does not do
It sets no cookies, uses no analytics service, and embeds no content from third-party servers – no fonts, no maps, no videos, no tracking pixels. Everything your browser loads comes from the same server. There is no contact form and no sign-in, so there is nothing here for you to enter.
Visitor counter
The footer of the home page shows a number: how often the site has been visited. It is kept on this server itself; no third-party service is involved. A visit counts once per day and device.
So that a second request on the same day does not count again, a checksum is derived from your IP address and your browser's identification – using a random key that is generated afresh every day. Only those checksums for the current day and the running total are stored. At the turn of the day both the checksums and the key are discarded; after that no entry can be traced back to an IP address. Your IP address itself is never stored. Nothing is written to or read from your device – the counter needs no cookies and no JavaScript.
The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is simply knowing whether the site is visited at all. The number is not analysed, not passed on and not combined with other data; individuals cannot be identified from it. You may object to this processing under Art. 21 GDPR.
Server logs
No continuous access log is kept. The web server only records requests that result in an error – for instance a request for an address that does not exist. Such an entry contains the time, the cause of the error, the address requested and your IP address.
The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in operating the site securely and without faults. The logs are not combined with other data and are not analysed to identify individuals. They are rotated daily and deleted automatically after seven days.
Hosting
The site is hosted by Uberspace, a service of jonas & alexander GmbH, Mainz, Germany. The provider processes the log data described above as a processor pursuant to Art. 28 GDPR and additionally keeps its own records as required to operate and secure its systems. Details are set out in the provider's privacy policy.
Links to other services
This site links to GitHub, Steam, Spotify, Last.fm, Instagram and LinkedIn, to lotgd.de and to applications of my own. Only when you follow such a link does its operator learn of your visit; from that point their privacy terms apply.
The application at /festival is a separate service with user accounts and its own data processing. The information provided there applies to it, not this page.
Your rights
You have the right to obtain information about the data stored about you (Art. 15 GDPR) as well as rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Please use the contact given above.
Independently of this, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).