Privacy Policy

Current as of: April 2026

1. Controller

Leon Körner

Freelancer for Automation, Integration & Consulting

Taubacher Str. 31b
99425 Weimar

Email: mail@leonkoerner.de

2. General information on data processing

Personal data is only processed to the extent necessary to provide a functional website and the offered content.

3. Hosting

3.1 Web hosting – udmedia GmbH

The website is hosted by udmedia GmbH, Kölner Straße 28, 41812 Erkelenz, Germany. udmedia provides the technical server infrastructure in a data center in Germany and processes server data as a processor pursuant to Art. 28 GDPR.

Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in the proper operation of the website).

3.2 CDN | Security Proxy – Cloudflare

The website is delivered via the Content Delivery Network and security proxy of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare acts as a reverse proxy between your browser and the web server. In doing so, technical connection data (IP address, HTTP headers, timestamps) is processed by Cloudflare to provide DDoS protection, TLS encryption, and fast content delivery. Processing in the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information on data processing by Cloudflare can be found in Cloudflare's privacy policy.

Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in secure and fast website operation).

4. Server log files

When the website is accessed, the following data is automatically collected and stored in server log files:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file accessed
  • Data volume transferred
  • HTTP status code (success/error)
  • Browser type and version, operating system
  • Referrer URL (previously visited page)

This data is used exclusively for the technical provision and ensuring the operation of the website.

Legal basis: Art. 6 Para. 1 lit. f GDPR.

5. SSL/TLS encryption

This website is transmitted exclusively via HTTPS. TLS certificates are provided by Let's Encrypt and automatically renewed. Transmitted content is thereby protected against unauthorized reading. HSTS (HTTP Strict Transport Security) is also enabled to ensure enforced HTTPS connections.

6. Contact by email

When you contact me by email, I process your information (email address, content, timestamp, and your name if provided) to handle your request.

Legal bases

  • Art. 6 Para. 1 lit. b GDPR – to the extent your inquiry relates to the conclusion or initiation of a contract.
  • Art. 6 Para. 1 lit. f GDPR – legitimate interest in appropriate communication.

After final processing, your data will be deleted, unless statutory retention obligations preclude this.

7. Cookies, analytics and tracking

This website does not use any analytics or tracking services (e.g. Google Analytics), social media plugins or advertising cookies. Only technically necessary data required for the secure delivery of the website is processed.

8. Fonts

This website uses locally hosted fonts for uniform presentation. When you access a page, your browser loads the required fonts directly from our own server. There is no connection to third-party servers (such as Google), and no IP address is transmitted to third parties.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in uniform presentation without third-party tracking).

9. Local Storage (localStorage)

This website stores technically necessary settings (selected color scheme) in your browser's local storage (localStorage). This data remains exclusively on your device and is not transmitted to any server. No tracking or profiling takes place.

Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in a user-friendly and accessible website).

10. Recipients of personal data

  • udmedia GmbH – hosting provider (processor, Art. 28 GDPR)
  • Cloudflare, Inc. – CDN/security proxy (processor, standard contractual clauses)
  • Public authorities – where overriding legal provisions apply

No further transfer to third parties takes place.

11. Storage duration and deletion

Personal data is only stored for as long as is necessary for the stated purposes, or until you exercise your right to erasure or objection – unless statutory retention obligations preclude this.

12. Your rights

Data subject rights

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, an informal message to the email address above is sufficient.

Right to lodge a complaint

In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)
www.tlfdi.de

13. Withdrawal of consent

To the extent that processing is based on consent (Art. 6 Para. 1 lit. a GDPR), you have the right to withdraw this at any time.

14. Changes to this privacy policy

This privacy policy is updated as needed, for example when new services are used or legal requirements change. The current version published on this page is always authoritative. The date of the last update is indicated above.