Privacy policy

Daniel Riewe, Stäuchle 2, 71088 Holzgerlingen, Germany.

Contact via the contact form on the home page.

The website is delivered via Cloudflare Pages and the content delivery network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). When you visit, your browser transmits technically necessary data: IP address, date and time, the requested address, the referrer (the page you came from, if your browser sends it), and browser and system details (user agent). Cloudflare processes this data to deliver the site and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is secure, fast and reliable delivery of the website. I do not analyse access logs. How long Cloudflare keeps its own logs is set out in Cloudflare’s privacy policy ↗.

Cloudflare processes the data as a processor under the Cloudflare Data Processing Addendum ↗.

Transfers to third countries: data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Data Privacy Framework list ↗). Transfers to certified companies are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).

Only on daniel-riewe.dev, the site loads a small script from static.cloudflareinsights.com. It counts page views and measures load time. It sends to Cloudflare: the page visited (Cloudflare stores it without URL parameters), the referrer, browser and device type, the country derived from them, and page speed measurements. To transmit this, Cloudflare technically also processes your IP address.

Cloudflare Web Analytics sets no cookies, uses no local storage, and does no fingerprinting or profiling of individual visitors. I only see aggregated numbers such as page views per page and referring sites.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is knowing which content is read and how fast the site loads. You can object under Art. 21 GDPR or block the measurement technically, for example with a content blocker. Section 3 applies to third-country transfers and processing.

If you write to me using the form on the home page, I process your name, email address, message, the page language and the time. The website does not store this data. It is sent once via Cloudflare Email Routing as an email to my personal mailbox, with your address as the reply-to address.

The purpose is handling your request. The legal basis is Art. 6(1)(f) GDPR (interest in answering requests), or Art. 6(1)(b) GDPR for requests relating to a contract. I delete the email once your request is settled, unless statutory retention duties apply.

Spam protection: for this, Cloudflare Turnstile loads a script from challenges.cloudflare.com on the home page. Turnstile uses technical characteristics of your browser and connection (including your IP address) to check whether a human is using the form. When you submit, the server verifies the result with Cloudflare together with your IP address. The legal basis is Art. 6(1)(f) GDPR; my interest is protection against automated spam. Details: Cloudflare Turnstile privacy addendum ↗. Sending errors are logged without form content.

Karate tracker: on the karate page you can set your own ticks. They are stored only in your browser’s localStorage (key “karate-tracker-v1”) and never transmitted. Delete them with “Clear your ticks” or in your browser settings.

Back button: so that “‹ Back” returns to the page of this site you came from, the site keeps the navigation in sessionStorage and the tab’s history. This is not transmitted and ends when you close the tab.

Both are permitted without consent under § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because they are strictly necessary to provide the feature you use.

Videos (e.g. Mars Patrol), audio and fonts (Nunito, Press Start 2P) are hosted on this server and delivered via Cloudflare like the rest of the site (section 3). No content from YouTube, Google Fonts or other third parties is embedded. The kata videos on the karate page are plain links to YouTube.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to me via the contact form.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany (website ↗, complaint ↗).