Privacy policy

This is a courtesy translation. In the event of any discrepancy, the German version prevails.

With this privacy policy I inform you, pursuant to Article 13 of the General Data Protection Regulation (GDPR), which personal data are processed when you visit this website, for what purposes, and on what legal basis.

1. Controller

Fabian Weiß
An der Friedenseiche 1
39629 Bismark (Altmark)
Germany
Email: fabian@weiss-swe.de

No data protection officer has been appointed, as there is no legal obligation to do so.

2. The essentials

• This website sets no cookies and stores no information on your device.
• There is no tracking, no analytics and no advertising.
• No third-party content is loaded – fonts, images and scripts are served from my own server.
• Enquiries sent through the contact form are delivered to my mailbox by my own server, without any external form service.
• Your data are not sold, not used for advertising and not transferred to countries outside the EU.
• There is no automated decision-making, including profiling (Article 22 GDPR).

3. Hosting

This website and the associated mailbox are operated at netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The servers are located in Germany. netcup processes the data solely on my behalf and on my instructions; a data processing agreement pursuant to Article 28 GDPR is in place with netcup.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in providing this website securely, reliably and economically.

4. Visiting the website and server log files

When you visit this website, your browser necessarily transmits information to the server. The following data are processed in server log files:

• IP address of the requesting device
• date and time of access
• requested address (URL), HTTP method and status code
• amount of data transferred
• referrer URL (the previously visited page), where transmitted
• browser and operating system used (user agent)

This processing is necessary to deliver the website, to ensure its stability and security, and to detect errors and attacks. The legal basis is Article 6(1)(f) GDPR. Log files are deleted automatically after 14 days at the latest. They are kept longer only where individual entries are needed to investigate a specific security incident, and only until that investigation is closed.

5. Encryption

This website is delivered exclusively over an encrypted connection (HTTPS/TLS). Data you send to this website – through the contact form, for instance – therefore cannot be read by third parties in transit.

6. Contact form

What data are processed

If you use the contact form, I process the data you enter: name, email address, optionally your company name, and your message. The time of the enquiry is recorded as well.

How the processing works

Your details are transmitted to my server in encrypted form, checked there for completeness and delivered to my mailbox as an email. The form contents are neither stored nor logged on the web server. No external form service is used.

Protection against misuse

To protect the form against spam and bulk automated requests, I use the following measures:

• Your IP address is held in the server's memory only, in order to limit the number of requests per sender. It is discarded after one hour at the latest, is not stored permanently, is not logged and is not combined with the details you enter in the form.
• The form contains a field invisible to humans that only automated programs fill in.
• A small script measures, in your browser, how much time passes between opening the page and submitting it, and transmits that duration only. No data are stored on your device in the process.

Purpose and legal basis

I process your details in order to answer your enquiry. Where your enquiry is aimed at concluding or performing a contract, the legal basis is Article 6(1)(b) GDPR. In all other cases the legal basis is Article 6(1)(f) GDPR; my legitimate interest lies in answering enquiries addressed to me. The measures against misuse are based on Article 6(1)(f) GDPR; my legitimate interest lies in the security and functioning of the form.

Required information

Name, email address and message are required so that I can handle your enquiry and reply to you. You are under no statutory or contractual obligation to provide these data. Without them the form cannot be submitted; you are welcome to write to me directly by email instead.

Retention period

I delete your enquiry once it has been dealt with conclusively and no further communication is to be expected. If we end up working together, I retain business correspondence within the statutory retention periods, in particular under section 147 of the German Fiscal Code (as a rule six years). The legal basis for this is Article 6(1)(c) GDPR.

7. Contact by email

If you write to me by email, I process your email address and the contents of your message in order to deal with your request. Purpose, legal bases and retention correspond to the section on the contact form. Please note that unencrypted email is not in every case protected against access by third parties while in transit between providers.

8. Link to LinkedIn

This website contains a plain link to my LinkedIn profile (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). It is not an embedded plugin: no data are transmitted to LinkedIn when you visit this website. Only when you click the link do you reach LinkedIn, where LinkedIn's own privacy policy applies.

9. Recipients

Your data are passed on only to netcup GmbH as the processor for hosting and email (see section 3). Beyond that, I disclose your data only where I am legally obliged to do so.

10. Your rights

You have the following rights in relation to the personal data concerning you:

• right of access (Article 15 GDPR)
• right to rectification (Article 16 GDPR)
• right to erasure (Article 17 GDPR)
• right to restriction of processing (Article 18 GDPR)
• right to data portability (Article 20 GDPR)
• right to object to processing (Article 21 GDPR, see below)

An informal message to fabian@weiss-swe.de is enough to exercise your rights.

You also have the right to lodge a complaint about the processing of your data with a data protection supervisory authority (Article 77 GDPR). In particular, you may contact the authority of your place of residence, your place of work or the place of the alleged infringement. The authority responsible for me is the State Commissioner for Data Protection of Saxony-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany.

12. Changes to this privacy policy

I update this privacy policy whenever the website or the underlying data processing changes. The version published here is the one that applies.

Last updated: September 2026