Privacy Policy

I collect and process the following data:

• Contact form submissions (name, email, subject, and message), processed via Netlify Forms
• Contact information (when you contact me directly via email)
• Email, appointment and meeting data arising when you communicate with me through Google Workspace (Gmail, Google Calendar, Google Meet)
• Analytics data via Plausible Analytics (privacy-friendly, no cookies, no personal data tracking)
• Comment content and technical usage data via Hyvor Talk (when the comment system is active and used by you)

I use your data exclusively for the following purposes:

• Responding to your inquiries and providing my services
• Scheduling and holding appointments and video meetings
• Providing an interactive discussion and comment system on blog articles
• Improving website performance and user experience

I process your personal data based on the following legal grounds:

• Art. 6(1)(a) GDPR (consent) for submitting comments and voluntary profile details
• Art. 6(1)(b) GDPR (contract performance or pre-contractual steps) for business correspondence and inquiries
• Art. 6(1)(f) GDPR (legitimate interest) for website security, spam prevention, and privacy-respecting analytics

My business communication — email, scheduling, and video meetings — runs on Google Workspace. In the EEA the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google acts as a data processor under a data processing agreement (Art. 28 GDPR); transfers to Google LLC in the United States are covered by the EU Standard Contractual Clauses.

• Email (Gmail): When you write to me — directly or through the contact form — your message, email address, name, and the technical headers of the message (including sending server IP and timestamps) are stored and processed in my Google Workspace mailbox, including Google's automatic spam and malware filtering.
• Calendar & meeting invitations (Google Calendar): When we arrange an appointment, the invitation contains your name, email address, the agreed time, and any subject, agenda, or note fields. This information is visible to everyone invited and is stored in Google Calendar.
• Video meetings (Google Meet): Joining a meeting transmits your display name, email address, IP address, device and connection metadata, and your audio, video, chat, and any screen-shared content to Google for the duration of the call.

Recording: Meetings are not recorded, transcribed, or automatically summarised by default. If a recording, transcript, or automatic note-taking feature is used in a specific meeting, I announce it at the start of the call, and you can object or leave the meeting.

Legal basis: Art. 6(1)(b) GDPR where the communication relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (legitimate interest in efficient and reliable business communication).

Generative AI: I use Google Gemini only as a standalone tool for my own work. I do not enter client correspondence, contact inquiries, or other personal data originating from this website into Gemini or comparable AI services.

Further information: Google Privacy Policyand the Google Workspace Data Processing Addendum.

On blog articles, an interactive commenting and discussion system is provided via Hyvor Talk, operated by Hyvor (talk.hyvor.com).

Data Sharing Awareness: Please be aware that when the comment section is active, loading and interacting with the comment embed involves data transmission to Hyvor. Hyvor processes the following categories of data:

• Technical Connection Data & IP Address (Spam and Abuse Mitigation): To deliver the comment widget, detect automated bots, and prevent comment spam and abuse, Hyvor processes technical connection parameters (including IP address, browser user-agent, referrer URL, and request timestamps). This processing is grounded in our legitimate interest in maintaining a secure and spam-free commenting platform (Art. 6(1)(f) GDPR).
• Comment & Interaction Data: When you post a comment or submit a reaction, Hyvor processes your chosen display name/alias, email address, comment text, timestamps, and account details (if logged in via Hyvor or OAuth).
• Local Storage & Essential Cookies: Hyvor Talk uses local storage and functional cookies to maintain commenter session state and form preferences.

Hyvor is a privacy-conscious platform that does not sell user data or perform cross-site behavioral ad tracking. Processing is based on your consent (Art. 6(1)(a) GDPR) when voluntarily posting comments, as well as our legitimate interest (Art. 6(1)(f) GDPR) in facilitating community discussion and mitigating automated spam.

For detailed information regarding Hyvor's privacy and security practices, please inspect the Hyvor Privacy Policy (hyvor.com/privacy).

You can edit or delete your posted comments directly through the Hyvor Talk interface or by contacting me.

I do not sell or share your data with third parties, except with the following essential service providers:

• Netlify, Inc. (USA) — Website hosting, content delivery network, and SSL management, plus receipt and storage of contact form submissions via Netlify Forms, including automated spam filtering (Akismet, Automattic Inc.). Transfers to the United States are covered by the EU Standard Contractual Clauses. Privacy Policy: netlify.com/privacy.
• Google Ireland Limited (Ireland) — Google Workspace: email (Gmail), scheduling (Google Calendar), and video meetings (Google Meet). Privacy Policy: policies.google.com/privacy.
• Hyvor — Commenting and interaction engine on blog articles (when active and utilized). Privacy Policy: hyvor.com/privacy.
• Plausible Analytics (EU) — De-identified, cookie-less website analytics that do not track personal identifiers.
• When legally required by applicable statutory obligations.

I store your data only as long as necessary for the respective purposes:

• Contact inquiries: until the inquiry is fully addressed and resolved; submissions held in the Netlify Forms inbox are deleted afterwards
• Business correspondence: in accordance with statutory commercial retention obligations
• Emails and calendar entries in Google Workspace: until the purpose no longer applies or statutory retention periods expire, after which they are deleted
• Blog comments: until deleted by the user, until the corresponding post is removed, or upon a deletion request
• Analytics data: aggregated and anonymized without individual persistence

You have the following rights regarding your personal data:

• Right to access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restrict processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)