Privacy policy.

In brief

This website only processes the data needed to run it and to answer your inquiry. Fonts, graphics and animations are loaded from my own server. No cookies are set, and audience measurement runs on my own server without third parties.

Hosting and server log files

The website runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in the data center in Falkenstein/Vogtland, Germany, which is certified to ISO/IEC 27001. A data processing agreement under Art. 28 GDPR is in place with Hetzner.

When the pages are accessed, the following data is recorded automatically in server log files:

• IP address of the requesting device, shortened (the last byte for IPv4, the first 48 bits only for IPv6)
• date and time of access
• page or file requested, status code and amount of data transferred
• referrer URL, browser type and version, operating system

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in the secure and stable operation of the website and in detecting and defending against attacks. The log files are deleted automatically after 7 days unless they are exceptionally needed to investigate a specific security incident.

Audience measurement with Umami

To understand which pages are read and how visitors find this website, I use the open-source software Umami. It runs on my own server at Hetzner in Germany (see above); no data is passed on to third parties.

On each page view a small script transmits the address of the page (including any campaign parameters) and its title, the referrer URL, screen size, language setting and loading times, as well as individual events such as opening and submitting the contact form (without its content) or a click on the email address. While the page is open and visible, the script also sends a short signal without any further content every ten seconds, for at most 30 minutes; this gives the length of the visit. From your IP address Umami derives your approximate location (country, region and city) and, together with the browser identifier, an anonymous identifier that changes daily. The IP address itself is not stored. No cookies are set and no data is stored in your browser; you cannot be recognized across several days or across other websites.

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in improving the content and technology of this website on the basis of aggregated usage figures. If your browser sends the “Do Not Track” signal, no measurement takes place; you can also object at any time, for example with a content blocker. The measurement data is deleted automatically after 24 months.

Contact form and inquiries

If you send me an inquiry using the form or by email, I process the details you provide (selected topics, name, email address, company if given and your message), as well as the page and language you send the form from and the time of your consent, in order to answer the inquiry and, where applicable, to prepare an offer.

The legal basis is Art. 6 (1) (b) GDPR insofar as the inquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR. The data is deleted once the inquiry has been dealt with in full, unless statutory retention obligations apply.

The form transmits your details in encrypted form to this website, which forwards them to me as an email. To send and store my email I use the mail service of Neue Medien Münnich (ALL-INKL.COM), Hauptstraße 68, 02742 Friedersdorf, Germany, with whom a data processing agreement under Art. 28 GDPR is in place. The form does not send you a confirmation email.

To protect against abuse, the website briefly processes your IP address in memory when you submit the form, in order to limit the number of inquiries per sender. It is neither stored nor logged and is discarded after one hour at the latest. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is protecting the form against mass abuse.

Booking a meeting

On the “Book a call” page you can arrange a meeting with me. For this I process the details you enter in the form (name, email address and, if given, company, website, phone number, additional attendees and your message) as well as the chosen time, the meeting format and your browser’s time zone.

The legal basis is Art. 6 (1) (b) GDPR: the processing serves steps taken at your request prior to entering into a contract.

The meeting is entered in my Google Calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). You are listed as a guest, and Google Calendar sends you the invitation by email. Data may also be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. If you choose Google Meet, Google creates the meeting link. If you choose Microsoft Teams, Microsoft’s privacy notice applies when you join.

The booking service stores the booking on my server at Hetzner (see above) and deletes it 90 days after the meeting. The calendar entry is kept as long as I need it for invoicing and statutory retention obligations. Confirmations and reminders are sent through the mail service named above.

To protect against abuse, the booking service briefly processes your IP address in memory to limit the number of booking attempts. It is neither stored nor logged and is discarded after one hour at the latest. It also checks whether the domain of your email address can receive email. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is protecting the booking against abuse.

Cookies and local storage

This website sets no cookies and stores no data in your browser. That is why there is no cookie banner: nothing happens that would require your consent under Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

Fonts and external content

The fonts Montserrat, Open Sans and JetBrains Mono are served locally from my own server. There is no connection to servers of Google or any other font provider. Images, graphics and animations are also loaded entirely from my own server.

SSL/TLS encryption

For security reasons this website uses TLS encryption. You can recognize an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. When encryption is active, the data you transmit cannot be read by third parties.

Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

An informal message to hi@jbraucker.com is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

Objection to advertising emails

The use of the contact details published in the legal notice for sending unsolicited advertising and information material is hereby objected to.