Privacy notice

1. Controller

This website is operated by Dr. Tim Wanger, Am Sonnenhof 24, 55268 Nieder-Olm, Germany. For questions about your personal data, contact kontakt@timwanger.com or +49 6136 8501755.

2. Hosting

This website is hosted by Netlify, Inc., USA. When you visit, the hosting service processes technical connection and access data, including your IP address, the time and address of the request, and device and browser information transmitted by your browser. This supports delivery, reliability and security, including the detection and prevention of abuse. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the secure operation of this website.

Netlify processes data as a service provider under its contractual data processing terms. See the Netlify Data Processing Agreement and the provider’s privacy notice.

3. Contact and enquiries

When you use the contact form, your name, email address, selected topics and message are sent to and stored by Netlify Forms to handle your enquiry. Netlify also filters submissions for spam; its documentation identifies Akismet as part of this process. The form includes a hidden field to help detect automated submissions. It does not embed reCAPTCHA.

If you contact me by email or telephone, I process the contact details and information you provide to respond. Recipients include service providers for hosting, form processing and communication, where required for the relevant service. I use Google Workspace for kontakt@timwanger.com. Google processes email contents, sender and recipient addresses and technical communication data to deliver, store and secure email. This serves the same purposes and uses the same legal bases as handling your enquiry.

For enquiries about an offer or the performance of a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR; my legitimate interest is responding to your message. Providing information is voluntary. Without the necessary contact details and a description of your enquiry, I may be unable to respond. Submitting the form does not order a paid service.

Please do not submit health information or confidential information about other people through the form.

4. Processing outside the European Union

Netlify and its subprocessors may process data outside the EU and European Economic Area, particularly in the United States. Section 14 of Netlify’s Data Processing Agreement describes transfers under the EU-US Data Privacy Framework and, where that framework does not apply, EU Standard Contractual Clauses. The contractual safeguards are available there. Netlify also publishes a list of subprocessors.

Google Workspace may also involve processing by Google group companies and subprocessors outside the EU and European Economic Area, including the United States. Section 10 and Appendix 3 of the Google Cloud Data Processing Addendum describe transfer arrangements and safeguards, including the applicable Standard Contractual Clauses. The Google Workspace subprocessor list identifies providers and processing locations.

5. Retention

Retention depends on the processing purpose and statutory obligations. For enquiries, the relevant criteria are whether the matter has been resolved and whether it leads to a contractual relationship or legally relevant correspondence. Data that is no longer needed must be deleted unless statutory retention obligations or the establishment, exercise or defence of legal claims require continued storage. Technical logs depend on the period needed for operation and security and the hosting provider’s retention rules. You can request information about your specific stored data using the contact details above.

6. Browser functions and external links

Embedded font, image and application files are delivered through this website. Your language choice is reflected in the page address. Self-check answers are processed in your browser and are not transmitted as quiz answers through the contact form. The website does not embed advertising trackers or social media plugins in its application code. If you follow an external link, such as LinkedIn, the destination website’s privacy notice applies to that visit.

7. Your rights

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You can withdraw any consent you have given with effect for the future. This does not affect the lawfulness of processing before withdrawal.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to processing for direct marketing at any time.

You can lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement (Article 77 GDPR). The authority responsible for my place of business is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate.

The self-check is for personal orientation. It does not make automated decisions with legal or similarly significant effects.