Privacy

Your privacy.

This policy explains how personal data is handled when you visit this website or contact its operator.

Controller

Nicolas Mehlei
Galgenberg 39A
22880 Wedel
Germany

Email: [email protected]

Delivering and protecting this website

The website runs on Microsoft Azure App Service. Requests necessarily include an IP address, request time, requested resource and technical browser information. Processing is based on Article 6(1)(f) GDPR: the legitimate interests of reliably delivering and securing this website.

Cloudflare provides DNS and, when traffic is proxied through its network, content delivery and protection. It processes connection and request information to deliver and secure the website, based on Article 6(1)(f) GDPR.

The application does not log message contents, email addresses or names. Technical records support fault diagnosis, abuse prevention and incident investigation. Retention depends on the hosting service configuration and the duration of any investigation.

Contact enquiries

The contact form collects your name, email address and message so the operator can respond. Please do not include sensitive personal information. General professional correspondence is processed under Article 6(1)(f) GDPR, based on the legitimate interest in responding to enquiries. Article 6(1)(b) applies where processing is necessary for pre-contractual steps you request.

The form sends your message through Brevo (Sendinblue SAS, France) to [email protected], hosted by Host Europe GmbH. Direct emails are also handled by Host Europe. The website does not maintain a separate message database. Brevo and the mailbox provider process messages on the operator's behalf. Data processing agreements apply to providers processing data on the operator's behalf.

Enquiries are retained while I handle your request and any related follow-up. If the exchange develops into an ongoing professional relationship, relevant correspondence is retained for that relationship. I manually delete messages once they are no longer needed for these purposes, unless statutory retention obligations or the establishment, exercise or defence of legal claims require continued storage. In those cases, deletion follows the end of the applicable obligation or the resolution of the claim and relevant limitation periods. You may request erasure using the contact details above, subject to applicable exceptions.

The form uses a short-lived signed token, an invisible honeypot field and an in-memory request limit to reduce abuse. It does not use a third-party CAPTCHA or store a tracking identifier on your device. Request-limit counters reset after ten minutes and contain no visitor identity.

Cookies, analytics and external content

This application itself sets no cookies and uses no browser storage, advertising, visitor analytics, embedded social feeds or externally hosted fonts. Hosting and network protection services process technical information needed to deliver and secure requests. Images and brand icons are served from this website. Following an external link takes you to a separate service whose own privacy information applies.

Operational diagnostics

When configured, server-side OpenTelemetry exports technical diagnostic spans to the operator's self-hosted monitoring service. The custom contact telemetry uses event types and random request identifiers, excluding message contents, names and email addresses. Diagnostic records are separate from correspondence and subject to the monitoring service's retention settings. Processing is based on Article 6(1)(f) GDPR, for reliable operation and fault diagnosis.

Service providers and international processing

Providers and their subprocessors may process data outside the European Economic Area. Their data protection terms describe applicable transfer safeguards, including adequacy decisions and standard contractual clauses where applicable. You may contact the controller for information about safeguards relevant to your data.

Further information is available from Microsoft, Cloudflare, Brevo and Host Europe.

Your rights

Subject to the applicable conditions, you may request access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests under Article 21 GDPR, particularly for reasons arising from your situation. Contact the controller using the details above. No automated decision-making or profiling is performed.

You can complain to a supervisory authority, including the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany. See datenschutzzentrum.de.

Required information

Providing a name, email address and message is necessary to answer a form enquiry; without these details the form cannot deliver a useful enquiry. You may instead contact the operator through the legal notice or LinkedIn.