Privacy notice

Last updated: 8 October 2026.

This notice explains what personal data is processed when you visit this website or contact me, and your rights under the General Data Protection Regulation (GDPR).

Who is responsible

The person responsible for this website is the provider named in the legal notice, which also gives the email address and telephone number to use for questions about this notice. No data protection officer is appointed.

What happens when you visit

The website is hosted by GitHub (GitHub Pages). GitHub states that when a GitHub Pages site is visited, the visitor’s IP address is logged and stored for security purposes, whether or not the visitor has a GitHub account. Your browser also sends the usual request details (the page asked for, the browser type and the referring page) to the server. GitHub processes these logs for its own purposes as the data controller, as its privacy statement describes. I have no access to them.

• Purpose: to deliver the website to you and to keep it secure.
• Legal basis: Article 6(1)(f) GDPR. The legitimate interest, mine and GitHub’s, is in delivering this site reliably and securely and in defending against misuse and attacks.
• Recipients: GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA) and GitHub B.V. (Prins Bernhardplein 200, 1097 JB Amsterdam, the Netherlands). GitHub’s privacy statement says which of them acts as controller.
• Transfer outside the EU: GitHub processes data in the United States. GitHub states that it takes part in the EU-U.S. Data Privacy Framework and that it generally relies on the European Commission’s standard contractual clauses (Implementing Decision 2021/914) for transfers. A copy of those safeguards can be requested from GitHub.
• Storage: GitHub decides how long it keeps its logs. Its privacy statement does not give a fixed period.

This website does not use a contact form, cookies, analytics, tracking or advertising, and it does not load fonts, scripts or images from other servers. It uses one short script, which filters the project list and loads a Tableau view when you ask for it. The script stores nothing on your device and reads nothing from it.

Contact by email or telephone

If you email or call me, I process what you tell me, together with your contact details, to answer you. The legal basis is Article 6(1)(b) GDPR where you ask about a job or an assignment, and otherwise Article 6(1)(f) GDPR, my legitimate interest in replying to messages sent to me. I keep the message for as long as it is needed to deal with your enquiry and any follow-up. Calls are not recorded.

My email is hosted by Microsoft (Microsoft 365), which processes it on my behalf under Microsoft’s data protection terms.

Links to other sites and embedded views

The site links to my profiles on LinkedIn, Tableau Public and GitHub, and to projects hosted elsewhere. Following a link takes you to that site, and its own privacy notice applies.

Some project pages offer to load an interactive Tableau Public view. Nothing is loaded from Tableau until you press the button. Pressing it connects your browser to Tableau (Salesforce, USA), which receives your IP address and may set cookies, and it means you agree to that connection. The data shown in the views is open or synthetic data. You can withdraw your agreement at any time by leaving or reloading the page and deleting Tableau’s cookies in your browser. Tableau’s own privacy statement applies to what it does.

Providing data

You are not required to provide any personal data to read this website. Your IP address is processed technically whenever your browser connects to it. No automated decision-making or profiling takes place.

Your rights

You have the right to access your data (Article 15), to have it corrected (Article 16) or erased (Article 17), to restrict its processing (Article 18) and to receive it in a portable form (Article 20).

These rights apply to the data I hold, which is your enquiry if you have emailed or called me. To use them, contact me using the details in the legal notice. I hold no data from visiting this website. The connection logs are kept by GitHub as its own controller, so requests about them go to GitHub, through the contact routes in its privacy statement.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data that is based on Article 6(1)(f) GDPR (legitimate interests). I will then stop that processing unless I can show compelling legitimate grounds for it that override your interests, rights and freedoms, or unless it serves to establish, exercise or defend legal claims. This applies to the data I hold, that is, your enquiry. To object, contact me using the details in the legal notice. To object to GitHub’s processing of connection logs, contact GitHub.

Complaints

You may complain to a data protection supervisory authority. For Hamburg, this is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), Ludwig-Erhard-Str. 22, 20459 Hamburg.

Changes

This notice is updated when the website changes, for example if analytics are added. The date above shows the latest version.