Privacy information.

Jeremias Buchendorfer
Aachen, Germany
j.buchendorfer@gmail.com

When the website is requested, the web server technically processes the IP address, timestamp, requested resource, referrer and browser user agent. This is necessary to deliver and protect the website. Access logs are rotated after 14 days and are not shown in the analytics dashboard.

The legal basis is the legitimate interest in secure and reliable website operation under Article 6(1)(f) GDPR.

Analytics remains off unless you actively accept it. If enabled, the website records a random pseudonymous visitor identifier, a session identifier, page path, timestamps, engaged session duration, coarse device category, referrer hostname and clicks on a fixed list of navigation, project and contact actions.

The analytics database does not store raw IP addresses, complete user-agent strings, URL query parameters, text input, email contents or cross-site activity. It is self-hosted and no external analytics provider receives the events.

The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw consent as easily as you gave it by opening Privacy settings.

When you use the contact form, email us or speak with us by phone, we process your message and the contact details you provide. Name and company are optional in the form. We use these details to answer your enquiry, clarify a possible computer-vision project and, where appropriate, prepare a scope and estimate.

Contact messages are stored separately from optional website analytics. They are not linked to analytics identifiers, combined with browsing activity or used for marketing. Submitting the form works regardless of your analytics choice.

If your enquiry concerns steps towards a possible contract with you, the legal basis is Article 6(1)(b) GDPR. For other business or general enquiries, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is responding to messages addressed to us and documenting the related communication.

The form also processes the submission time and a random submission identifier used to prevent duplicate storage. For abuse protection, the server briefly derives a keyed value from the requesting IP address. That value remains only in memory for the 15-minute rate-limit window and is not stored with the message.

Dashboard access is restricted to the people responsible for enquiries. The submitted message is stored on the website server; the contracted hosting and server-infrastructure provider may process it to operate that infrastructure. Form messages are not automatically forwarded to an email provider. Direct email and our email replies are delivered using Google’s Gmail service; telephone and later video-call providers process the information needed to connect the chosen communication.

A message and either an email address or telephone number are necessary so we can respond. Name and company are optional. Please do not submit patient data, health information, passwords or confidential production material in a first message. No automated decision-making within the meaning of Article 22 GDPR is used.

Analytics sessions and events are automatically deleted from the active database after 180 days. Turning analytics off from the same browser sends a deletion request for its pseudonymous visitor record and then removes its analytics identifiers.

Contact-form messages are automatically removed from the website inbox after 180 days and can be deleted earlier from the protected dashboard. If an enquiry becomes a project, correspondence needed to perform that project is retained for the project duration and afterwards only for applicable statutory commercial or tax retention periods. Other correspondence is deleted when it is no longer needed for the stated purpose.

Restricted daily recovery backups are retained for up to 14 additional days and are not used for website analysis or routine access. A deleted analytics record or contact message can therefore remain in a recovery backup until that backup expires.

Subject to the applicable requirements, you may request access, correction, deletion, restriction or portability of personal data and object to processing. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

Contact j.buchendorfer@gmail.com. You also have the right to lodge a complaint with a competent data-protection supervisory authority. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.