Privacy Policy
This is a translation for convenience. The legally binding version is the German Datenschutzerklärung.
1. Controller #
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):
Tobias Gesellchen
Ürziger Straße 8
53175 Bonn
Germany
Email: tobias@gesellix.de
2. Overview #
This website is a private blog. There are no user accounts, no comments, no contact form, no cookies, no tracking, and no analytics. Fonts, scripts, and the search are served by this website itself, not by third parties.
Personal data is only processed in two cases: technically when you request a page (server log files at the hosting provider), and when you send me an email.
3. Hosting and server log files #
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you request a page, Netlify automatically processes data transmitted by your browser, in particular:
- IP address
- date and time of the request
- requested page or file
- referrer URL (the previously visited page)
- browser type and version, and operating system
This data is technically necessary to deliver the website and to ensure its security and stability. I do not combine it with other data sources or analyse it for any other purpose.
Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is the secure and reliable provision of the website.
Data processing on my behalf: Netlify processes this data on my behalf. The required agreement according to Art. 28 GDPR (Netlify Data Processing Agreement) is part of Netlify’s terms.
Transfer to the USA: Netlify is certified under the EU-U.S. Data Privacy Framework. The transfer is therefore based on the European Commission’s adequacy decision (Art. 45 GDPR). For more information, see Netlify’s privacy policy.
4. Local storage in your browser #
If you switch the appearance (light/dark), the website stores this setting in your browser’s local storage. The setting does not leave your device and is not transmitted to me or any third party. You can delete it at any time in your browser settings.
Legal basis: § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as the storage is strictly necessary to provide the function you explicitly requested.
5. Contact by email #
If you send me an email, I process the information you provide (email address, name if given, content of the message) to answer your request. I do not share this data and delete it once it is no longer needed, unless statutory retention obligations apply.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering requests), or Art. 6(1)(b) GDPR for requests related to a contract.
6. External links #
Posts contain links to other websites, for example GitHub, Mastodon, or YouTube. Data is only transmitted to the respective provider once you follow such a link. Processing there is governed by that provider’s privacy policy.
7. Your rights #
Under the GDPR, you have the right at any time to:
- access the data I store about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
An informal email to the address above is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de).
Last updated: November 2026