Privacy policy

Controller

Lars Ofterdinger
Stellinger Weg 14
20255 Hamburg
Email: lars.ofterdinger@gmail.com

Server logs

This website is hosted by ALL-INKL.COM (Neue Medien Münnich). When a page is requested, the server automatically stores the details your browser transmits: IP address, date and time, the file requested, the amount of data transferred, the referrer and the browser type. I process these details so that the site runs securely and faults remain detectable. The legal basis is Article 6 (1) (f) GDPR. I do not assign them to individual people.

Without your consent

As long as you do not consent, I collect nothing beyond those logs. No cookies are set, no analytics service runs, and nothing is loaded from third-party servers. The demo on the home page and the mesh behind the header both run entirely in your browser. Only once you consent do Google Tag Manager and, with it, Google Analytics come into play.

Google Tag Manager

This site loads Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a tool for including other services. According to Google it sets no cookies of its own and does not evaluate your behaviour. Loading it does, however, transmit your IP address to Google, including to the USA. That is why it only loads if you agree in the notice at the bottom of the page. The legal basis is your consent, Article 6 (1) (a) GDPR and § 25 (1) TDDDG.

Your decision is kept by your browser in local storage under the key lofter-einwilligung. It is sent neither to me nor to Google. You can change it at any time using the “Consent” button in the footer.

Google Analytics runs through Tag Manager, see the next section. If another service is added, it will be listed here. Google’s privacy policy is available at policies.google.com/privacy.

Contact form

If you write to me through the form, I process the details you enter: name, email address, optionally company and topic, plus your message. I use them to answer your enquiry. The legal basis is Article 6 (1) (b) GDPR, or (f) for general enquiries. I delete messages once they are dealt with and no retention obligations stand in the way.

The transfer runs through the service provider Formspree (Formspree Inc., USA), which means your details are also processed in the USA. The Formspree privacy policy is available at formspree.io/legal/privacy-policy . If you would rather avoid that, simply send me an email.

Google Analytics

If you consent, Tag Manager loads Google Analytics 4, also provided by Google Ireland Limited. It records page views and a few automatically detected events such as scrolling, along with where the visit came from and what kind of device is used. I use that to make the site clearer, not to identify individual people.

For this Google Analytics sets two cookies, _ga and _ga_<id>. Google sets them to last two years; current browsers shorten that to 400 days at most. Your IP address is transmitted to Google and used there for a rough location estimate; according to Google it is not stored in the process. A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework, and there is a data processing agreement with Google. Event data retention is set to 14 months in the property.

The legal basis is your consent, Article 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time using the “Consent” button in the footer. When you withdraw, I delete both cookies and reload the page; after that nothing more goes to Google. What was already sent while consent was in place is not affected. Google also offers a browser add-on that prevents the collection: tools.google.com/dlpage/gaoptout.

Fonts

All fonts sit on the same server as the site and are delivered from there. No connection to Google Fonts or other providers is made, and no data is transferred to third parties.

Your rights

You have the right to information about your data, to rectification, erasure and restriction of processing, and to data portability. You can object to processing based on legitimate interest. To do so, contact me by email at lars.ofterdinger@gmail.com.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible here is the Hamburg Commissioner for Data Protection and Freedom of Information.

Last updated: September 2026