Privacy policy

Last updated: 17 October 2026

1. Controller

Dan Glogoveanu

Contact: via the contact form.

2. Principle

This is a purely private, non-commercial website without advertising or affiliate links. I only process data that is technically required to run the website, data you send me yourself through the contact form, or — only with your consent — usage statistics. Personal data is never sold and never passed on for advertising purposes.

3. Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When pages are requested, Netlify processes technically necessary data (IP address, date and time, requested page, referrer, browser and operating system) to deliver the website and keep it secure.

Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). As Netlify may process data in the USA, transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

4. Contact form

When you write to me via the contact form, your name, e-mail address and message are processed to answer your request. The form data is received and stored by Netlify Forms (Netlify, Inc., see above) and forwarded to me by e-mail.

Legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering requests). The data is deleted once the request has been fully handled.

5. Web analytics with Google Analytics 4 (only with consent)

Only if you explicitly agree in the cookie notice do I use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to see which pages are read. Before your consent, no Google script is loaded and no cookie is set.

Google Analytics sets cookies (e.g. _ga, _ga_*) and processes usage data such as pages viewed, time on page, approximate region, device and browser information. Google Analytics 4 does not store IP addresses. Google signals and advertising features are disabled. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.

Legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time with effect for the future viaCookie settings (also in the footer); the analytics cookies are then deleted. Data is deleted after 2 months.

6. Local storage in your browser

Your browser's local storage (localStorage) only holds your language choice (English/German) and your decision in the cookie notice. This data never leaves your device. Legal basis is § 25(2) no. 2 TDDDG.

7. Showing the postal address

My postal address is shown only after a short arithmetic check to make automated harvesting harder. The check runs entirely in your browser; no external CAPTCHA service is used and no data is transmitted or stored.

8. Fonts and external links

Fonts are served from this website; there is no connection to Google Fonts or other font providers. Links to LinkedIn, XING and GitHub are plain links. Data is only transmitted to the respective provider once you click such a link.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent at any time (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.