Zum Inhalt springen

Privacy policy

Introduction

This privacy policy explains the type, scope and purpose of the processing of personal data (“data”) on wordpress.rafaelalex.de. The site presents my WordPress theme. It has no forms, no comments and no analytics tools. Content from third-party servers (YouTube, Google Maps) loads only after you click to allow it, see section 9.

1. Controller

Rafael Alex
Ullsteinstraße 16
90763 Fürth
Germany
Phone: +49 (0) 176 320 33 188
Email: a@rafaelalex.de

2. Types of data processed

  • Usage data (e.g. pages visited, access times)
  • Meta and communication data (e.g. device information, IP addresses)
  • Contact data, if you send me an email

3. Categories of data subjects

Visitors and users of this website (together referred to as “users”).

4. Purpose of processing

  • Providing the website, its functions and content
  • Answering contact requests
  • Security measures

5. Definitions

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”).

“Processing” means any operation or set of operations performed on personal data, whether or not by automated means.

“Controller” means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

6. Legal bases

In accordance with Art. 13 GDPR, I inform you of the legal bases of my data processing. Processing is based on Art. 6(1)(a), (b) and (f) GDPR.

7. Security measures

In accordance with the legal requirements, I take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

8. Hosting and content delivery network

Hosting: This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre. A data processing agreement under Art. 28 GDPR is in place with Hetzner. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliably presenting my website).

Content delivery network (CDN): I use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA as a content delivery network. Cloudflare briefly processes users’ IP addresses. This is based on my legitimate interest in providing my website securely and efficiently under Art. 6(1)(f) GDPR. Data is transferred to the USA on the basis of the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/privacypolicy/

9. Embedded content after consent

Some pages show example modules with a YouTube video and a Google Map. They load nothing until you click the button on the module. Only then does your browser connect to the provider, which receives at least your IP address and the page you are on and may set cookies. Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent applies only to that one module and only until you leave the page; it is not stored.

Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework.

10. Transfers to third countries

Data is transferred to a third country (outside the EU or EEA) through the content delivery network named in section 8 and, after your consent, through the services named in section 9.

11. Rights of data subjects

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR), see section 12
  • Right to lodge a complaint: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

12. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR (Art. 21 GDPR). To do so, send me an email at a@rafaelalex.de.

13. Cookies and tracking

This website sets no cookies for visitors and stores nothing in the browser. There is no audience measurement and no tracking. Embedded services may set their own cookies once you allow them (section 9). Cookies are only set when logging in to the editorial area, where they are technically necessary (§ 25(2) TDDDG).

14. Deletion of data

The data I process is deleted or restricted in accordance with the legal requirements.

15. Server log files

With every request, the web server automatically stores the following information in log files:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Time of the request
  • IP address

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

16. SSL encryption

This site uses SSL encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser’s address bar.

17. Changes to this privacy policy

I reserve the right to amend this privacy policy so that it always meets current legal requirements.

Last updated: October 2026