Privacy policy
Here you can find out which personal data is processed when you visit this website and when you get in touch.
Controller
The controller within the meaning of the GDPR is the operator named in the legal notice (Umatix, Marko Lehmann). Contact: infoumatix.net.
Hosting
This website is operated by the operator at the address given in the legal notice.
Server logs
Page views are not logged. If a request is rejected (for example because of too many requests), only a hash of the IP address is stored (HMAC; the key changes monthly). These entries are overwritten by log rotation (at most 5 files of 10 MB each) and are typically kept for a few weeks. The web server does not write an access log. The legal basis is our legitimate interest in the security of the website and in preventing abuse (Art. 6(1)(f) GDPR).
Contact form
If you use the contact form, your name, email address, company (optional), topic and message are stored to process your request. The legal basis is your consent (Art. 6(1)(a) GDPR) or the performance of pre-contractual measures (Art. 6(1)(b) GDPR). The data is kept in a file on the server and deleted automatically after 365 days, or earlier on request. It is not shared with third parties. We are notified of new requests by push message via the ntfy.sh service; only the selected topic and a request ID are transmitted, no personal data.
Admin area
The admin area is for the operator only. Actions by administrators and failed sign-in attempts (with a hash of the IP address) are recorded in a log and deleted after 12 months. Visitors of the website are not affected.
Cookies and third parties
No cookies are set for visitors, with one exception: if you actively choose a color scheme with the switch in the header, a cookie named “theme” stores that choice for one year. It contains only “light” or “dark”, is not used for tracking and is technically necessary for the function you requested (§ 25(2) no. 2 TDDDG). Signing in to the admin area uses only technically necessary cookies – for the session, the sign-in transaction and signing out at the identity provider (§ 25(2) TDDDG). A consent banner is therefore not required. Fonts are loaded from this server; no requests are made to third-party providers.
Backups
Data is backed up in encrypted form: daily for 30 days, weekly for 8 weeks and monthly for 6 months. Deleted contact requests therefore disappear from the backups at the latest once these periods have expired.
External links
This website contains links to LinkedIn and GitHub and to the websites of my own projects. No data is transmitted to these providers merely by visiting this website; their privacy policies apply only once you follow a link.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time with effect for the future. Please contact infoumatix.net. You can also lodge a complaint with a data protection supervisory authority, for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).