Privacy notice
1. Controller
Patrick Wößner
Kapellenfeld 14
79291 Merdingen
Deutschland
Email: patrick@woessner.me · Phone: +49 (0)15678 617762
2. Short version
This site uses no tracking, no analytics, no ad networks, and no external fonts or CDNs. Nothing is shared with third parties beyond the hosting and mail providers that technically operate the site. Personal data is only collected when you submit one of the two forms.
3. Hosting and server logs
The site is hosted by: netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe. When you open a page, the host automatically processes server log files (IP address, date and time, requested file, referrer, browser type). The legal basis is Art. 6(1)(f) GDPR — my legitimate interest in operating the site securely and without errors. These logs are not merged with any other data source.
4. Contact form
If you use the contact form, I process your name, email address, selected topic and message. These are delivered to me by email and additionally written to a log file on the server so that no enquiry is lost if mail delivery fails.
The legal basis is your consent under Art. 6(1)(a) GDPR, given by ticking the checkbox, and Art. 6(1)(b) GDPR where your enquiry relates to entering into a contract or employment relationship.
5. CV request
When you request my CV, I process your name, email address and, optionally, company, the role you are hiring for and your note. In addition, a random access token is generated and stored together with your email address, the time of the request and a download counter. The token expires automatically (seven days by default) and is deleted no later than 30 days after expiry.
6. Spam protection and abuse prevention
To limit automated form submissions, I store a cryptographic hash of your IP address (never the plain IP) together with a timestamp when a form is submitted. These entries become invalid after at most one hour. The legal basis is Art. 6(1)(f) GDPR — legitimate interest in preventing abuse.
7. Cookies
Only strictly necessary cookies are set:
lang— remembers your language choice, valid for one year.pwsess— session cookie that protects the forms against cross-site request forgery. It is deleted when you close your browser.
These cookies do not require consent under § 25(2) TDDDG, which is why there is no cookie banner.
8. Retention
Submissions from either form are kept for as long as needed to handle your request, and at most twelve months after the end of our correspondence — unless statutory retention periods apply or you object earlier.
9. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future — an informal email to patrick@woessner.me is enough.
You also have the right to lodge a complaint with a data protection supervisory authority, usually the one where you habitually reside.
10. Encryption
This site uses TLS encryption. You can tell an encrypted connection by the padlock icon in your browser's address bar.