Skip to content
Franz Baur

Privacy Policy

Last updated: September 18, 2026

This is a courtesy translation. In case of doubt, the German version applies.

Controller

Franz Baur, , , email: franzbaur@gmx.net. A data protection officer is not required by law.

Principle

This website is built so that as little data as possible is collected. No cookies requiring consent are set. Fonts, scripts and images are served from my own server, so no third-party content is loaded. No tracking across websites takes place.

Hosting and server log files

The website is operated at . When a page is requested, the browser transmits technically necessary data which the server records in log files: date and time, the address requested, the amount of data transferred, the HTTP status code, the referrer and the browser identifier. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in the secure and trouble-free operation of the website. Log files are deleted after days.

A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

Contact form

If you use the form, I process the details entered — name, email address and message — in order to answer your enquiry. The message is delivered to me by email and additionally stored on the server, so that no enquiry is lost if sending the email should fail.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR — the legitimate interest lies in answering the enquiry. The details are deleted once the enquiry has been dealt with and no statutory retention periods apply, at the latest after months. Email is sent via .

Spam protection (Cap)

To fend off automated submissions, a computational task runs in the browser before the form is sent (proof of work, software "Cap"). The check runs on my own server at ; no data is transferred to third parties, no cookies are set and no user behaviour is evaluated. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing spam).

Analytics (Umami)

For analytics I use Umami, self-hosted analysis software at . Umami sets no cookies and creates no cross-device identifier. It records the page requested, the referrer, the approximate location at country level, the device type, screen size, browser and operating system. The IP address is not stored; it is only used to derive an anonymous value that changes daily and cannot be attributed to a person. The evaluation is purely statistical. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a data-minimising analysis of website usage).

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may also object at any time to processing based on a legitimate interest (Art. 21 GDPR). A message to the address above is sufficient.

Independently of this, you have the right to lodge a complaint with a supervisory authority, for example the Bavarian Data Protection Authority, Promenade 18, 91522 Ansbach, Germany.

Changes

If something about this website changes, I will update this policy. The version published here applies.