Privacy Policy

1. Data controller

Jacob Schubert
An der Pauluskirche 3-5
50677 Köln
Deutschland
Email: [email protected]

2. Overview of data processed on this site

This is a static portfolio website. It does not use advertising cookies, third-party tracking, or third-party analytics. It does run a small, self-hosted analytics tool to see aggregate traffic, described in the next section. The only other data processed is described below.

3. Analytics and cookies

This site counts visits using a self-hosted tool running entirely on our own server — no data is sent to or processed by any third party. By default, visits are counted using a salted, one-way hash of your IP address, which does not identify you and cannot be reversed to recover it.

On your first visit, a banner asks whether you'll allow a small first-party cookie that lets us count returning visitors more accurately. If you accept, this is set:

• ak_vid — a random identifier with no personal information in it, kept for 1 year, used only to avoid counting the same visitor twice

Declining is fully respected: the site works identically either way, and visit counting simply falls back to the hashed-IP method above. Whichever you choose is remembered in a separate, strictly necessary cookie:

• ak_consent — stores your accept/decline choice, kept for 1 year

You can change your choice at any time via "Cookie Settings" in the footer. Legal basis: Art. 6(1)(a) GDPR (consent) for ak_vid; Art. 6(1)(f) GDPR (legitimate interest in remembering your choice) for ak_consent, which is exempt from consent as it is strictly necessary for that purpose.

4. Server log files

Whenever this website is accessed, the hosting provider's servers automatically record standard log information (such as IP address, browser type and version, operating system, referring page, and date/time of access). This data is processed for technical and security purposes — to ensure the site functions correctly and to detect misuse — and is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable and secure operation of the website).

5. Contact by email or contact form

If you contact us by email or via the form on this site, the information you provide (name, email address, and any other personal details you choose to share) is stored in a database on our server and processed solely for the purpose of responding to your inquiry. The form also records the sending device's IP address for basic rate-limiting and spam prevention. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries and preventing abuse), depending on the nature of your message.

6. Your rights

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you (Art. 15 GDPR)
• Request correction of inaccurate data (Art. 16 GDPR)
• Request deletion of your data (Art. 17 GDPR)
• Request restriction of processing (Art. 18 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Request data portability (Art. 20 GDPR)
• Lodge a complaint with a supervisory authority — for Cologne, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

7. Data retention

Server log data is retained only as long as necessary for the technical purposes described above, and is deleted or anonymized thereafter. Email correspondence is retained only as long as needed to handle your inquiry, unless a longer retention period is required by law. The cookies described in section 3 expire after 1 year unless you clear them sooner.