softleb.de
Privacy Policy
Note: The legally binding version is the GermanDatenschutzerklärung. The text below is a courtesy translation.
Controller
Controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):
Simon Leber Cannabichstr. 3 81543 Munich Germany
Email: [email protected]
Principle
softleb.de is a static website built around data minimisation. Fonts are served directly from this server; no external font provider is embedded. For audience measurement it uses self-hosted Matomo only (see below) — cookieless and with no sharing to third parties. The one third-party service embedded is the contact form's spam protection (Cloudflare Turnstile, see below), loaded only on pages that carry the form. No third-party tracking or marketing tools are used.
Server log files
When the website is accessed, the web server processes technically necessary access data that your browser transmits automatically:
- IP address
- date and time of access
- page or file requested
- amount of data transferred and HTTP status code
- referrer URL and browser identifier (user agent)
This processing is necessary for the secure and stable provision of the website. The legal basis is the legitimate interest in technically error-free operation (Art. 6 (1) (f) GDPR). The data is not merged with other data sources and is stored only briefly.
Audience measurement with Matomo
To analyse how this website is used I employ Matomo, an open-source analytics tool. Matomo is self-hosted on my own infrastructure (matomo.softleb.de); the data is not shared with third parties and is not transferred to third countries.
Measurement runs without cookies. A“Do Not Track” setting in your browser is respected — in that case you are not recorded. Data collected includes the pages visited, the approximate location based on a shortened (anonymised) IP address, the referrer URL and browser/device information. The data is not merged with other sources and is not used to identify individuals.
The legal basis is the legitimate interest in privacy-friendly analytics to improve the website (Art. 6 (1) (f) GDPR). As collection is cookieless and honours “Do Not Track”, no consent is required.
Getting in touch
When you submit the contact form, the details you enter (name, email address, message) are processed on my own server and delivered from there to my mailbox by email. No third-party form provider is involved, and the message is stored only in that mailbox.
If you contact me by email or phone, I process your details solely to handle your enquiry (Art. 6 (1) (b) and (f) GDPR). I do not pass this data on without your consent and delete it once it is no longer needed and no legal retention obligations apply.
Contact form spam protection (Cloudflare Turnstile)
To protect the contact form from automated submissions I useCloudflare Turnstile, a service of Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Turnstile checks in the background whether a submission comes from a human — usually with nothing for you to click.
For this, pages carrying the contact form load a script fromchallenges.cloudflare.com. Cloudflare processes your IP address along with technical characteristics of your browser and device in order to assess the request. On submission my server verifies the resulting token with Cloudflare. According to the provider, this data serves bot defence only — not advertising or cross-site profiling.
The legal basis is the legitimate interest in protecting the form from abuse and spam (Art. 6 (1) (f) GDPR). The check runs without cookies. A transfer to the USA cannot be ruled out; Cloudflare is certified under the EU-US Data Privacy Framework, and standard contractual clauses are in place in addition. If you would rather not use Turnstile, you can always reach me without it by email at [email protected] or by phone.
Local settings and cookies
Your choice of appearance (light/dark) and accent colour is stored exclusively locally in your browser (localStorage). This information does not leave your device and is not transmitted to the server.
If you actively choose a language, this is recorded in a strictly necessary cookie (softleb-lang-chosen) so that your choice persists on return visits and the automatic language redirect is suppressed. This cookie serves only that function, contains no personal data and therefore requires no consent (Art. 6 (1) (f) GDPR, § 25 (2) TDDDG).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. To exercise these rights, contact the address above. You also have the right to lodge a complaint with a data protection supervisory authority.