Privacy policy

Controller

Ralf Steinert

St.-Wolfgang-Str. 30, 69198 Schriesheim, Germany

Email: hello@steitec.net

No cookies, no tracking, no third parties

This website sets no cookies for visitors, uses no analytics or tracking and loads nothing from third-party servers. Fonts are hosted on this server.

If you switch between light and dark mode, your choice is stored in your browser's local storage (key "steitec.theme"). It never leaves your device and you can delete it at any time in your browser settings.

Hosting and server logs

This website runs on my own server in Germany. When you open a page, the reverse proxy (Nginx Proxy Manager) in front of the web server records technical access data: IP address, date and time, requested page, status code, browser identification (user agent) and referring page.

This data is processed to deliver the website and to protect the server against attacks (Art. 6(1)(f) GDPR). Access logs are deleted after five weeks at the latest, error logs after eleven weeks at the latest.

Protection against attacks

To protect the server, a program (fail2ban) automatically evaluates these logs. If an IP address shows typical attack patterns — such as repeated failed logins or requests for known attack paths — it is blocked for one hour, in repeated cases for up to one week. The IP address is stored for the duration of the block (Art. 6(1)(f) GDPR).

Contact form and email

If you contact me via the form, your name, email address and message are stored on this server so I can answer your enquiry (Art. 6(1)(b) GDPR for project enquiries, otherwise Art. 6(1)(f) GDPR). Your IP address is not stored with the enquiry.

I am notified of new enquiries by a push message via the service ntfy.sh. This message contains no data from your enquiry — only the fact that a new enquiry has arrived. I read the enquiry itself on this server.

If you email me, your message is forwarded by the service ImprovMX (ImprovMX Inc., USA) to my mailbox at Gmail (Google Ireland Limited, Ireland) and stored there. Both providers may also process data in the USA.

Stored enquiries are deleted automatically after 6 months, unless legal retention obligations apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). To do so, simply send an email to hello@steitec.net.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.