Privacy

1. Data controller

Email: info@stefan-rohrbach.com

This notice explains the processing of personal data when you visit this personal website or contact me.

2. Hosting, domain and technical access data

The website, its domain and email mailbox are provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO acts as a processor under Article 28 GDPR for hosting and email services. The new hosting contract includes STRATO’s data processing agreement.

When you access the website, the web server processes data including the IP address, request time and target, browser and, where applicable, referring page. This supports content delivery, error analysis and protection against attacks. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the reliable and secure operation of this website.

STRATO states that visitor IP addresses are retained for attack detection and prevention for a maximum of seven days. This differs from the access logs available in the customer account: STRATO states that IP addresses or hostnames are anonymized in those logs, which are available for the preceding six weeks. These statements do not mean that all technical data is deleted after seven days.

STRATO’s technical service also provides server-side access statistics. These differ from embedded tracking services. No additional analytics or advertising services are used in the page code.

Further information: STRATO privacy information and access data information.

3. Processing locations and SiteLock Scan

STRATO operates its regular web hosting in German data centers. The “SiteLock Scan” service included in the hosting package is configured for this domain. STRATO describes this as a regular check of the website for malware, vulnerabilities and entries on spam and blocklists. The paid “Scan + Repair” add-on is not used.

The check concerns the website and its accessible content. Where that content contains personal data, it may also be subject to the check. The purpose is to protect the website; the legal basis for associated processing of personal data is Article 6(1)(f) GDPR. My legitimate interest is detecting malware and security issues.

STRATO lists SiteLock, LLC, USA, as a subprocessor for malware detection in its data processing agreement. STRATO specifies EU Standard Contractual Clauses as safeguards for relevant transfers to the United States. Information is available in the data processing agreement; a copy of the applicable safeguards may be requested using the contact details above.

This website embeds neither a SiteLock script nor a SiteLock badge. The scan is not a visitor behaviour analytics service used by me. Further information on its functionality is available in STRATO’s service description.

4. Cookies, external content and language switching

The page code I provide does not set cookies or use local browser storage. Language switching uses ordinary links. Images and logos are served with the website; fonts are not loaded from external providers. Analytics and advertising scripts, social media plug-ins and embedded videos are not integrated.

This website does not use analytics or marketing cookies. No cookie selection is therefore offered. The website uses HTTPS encryption; unencrypted HTTP requests are automatically redirected to HTTPS.

5. Email contact

If you contact me at info@stefan-rohrbach.com, I process your email address, message and any other information you voluntarily provide to handle your enquiry. STRATO provides the email mailbox.

Enquiries about working together are processed under Article 6(1)(b) GDPR to take pre-contractual steps or perform a contract. Other enquiries are handled based on my legitimate interest in responding to your message under Article 6(1)(f) GDPR.

Messages are deleted once the matter is fully handled and no statutory retention obligations or legitimate grounds for further storage remain. Legally required retention is based on Article 6(1)(c) GDPR. Providing information is voluntary; without the necessary details and a reply address, I may be unable to respond.

6. External links and LinkedIn

Links to LinkedIn, Stuttgart Media University and academic publications are ordinary hyperlinks. Displaying them does not load content from those providers. Following a link takes you away from this website; processing on the destination service is covered by its own privacy notice.

If you message me on LinkedIn, I use the profile and message information you share to handle your enquiry. The purposes, legal bases and retention criteria under “Email contact” apply accordingly. LinkedIn also processes data for its own service. Domain registration and worldwide email delivery may require other technical participants; their processing is distinct from the location of the web server.

7. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation.

To exercise your rights, contact me at info@stefan-rohrbach.com. You may complain to a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. One point of contact for Stuttgart is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

This website itself does not involve automated decision-making, including profiling, within the meaning of Article 22 GDPR.