Privacy

This page corresponds to the German Datenschutzerklärung. The German version is the authoritative one.

Status: 25 October 2026

Controller

Falk Baumhauer
Kevelaerer Str. 1
50733 Cologne
Germany

Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The plan is Webhosting Plus. The contract has been in place since 19 July 2025.

Processing under a contract pursuant to Article 28 GDPR has been part of the IONOS terms since 19 July 2022 and therefore covers this contract.

IONOS states that visitor data of this web hosting product is not transferred to third countries outside the EU.

Server log files

When the site is requested, IONOS collects the following information and anonymises it at the time of collection:

Referrer (previously visited page)
Requested page or file
Browser type and browser version
Operating system
Device type
Time of access
IP address in anonymised form, used only to determine the location of the access

The purpose is security, stability, and quality of the service. The legal basis is Article 6(1)(f) GDPR. The data is stored for 8 weeks. It is not passed on to third parties.

WebAnalytics

IONOS describes WebAnalytics as active by default on web hosting. Whether it is switched on in this hosting account has not been confirmed.

As described by IONOS, WebAnalytics does not use cookies. The IP address is transmitted with the page request, then anonymised immediately and processed without a link to a person. The data is determined by a pixel or a log file. What is collected is the referrer, the requested page or file, browser type and browser version, operating system, device type, time of access, and the IP address in anonymised form. IONOS states that it does not store personal data of website visitors in this process. The purpose is statistical evaluation and technical optimisation. The data is not passed on to third parties. The IONOS help page used here does not state a retention period. Where this processing takes place, the legal basis is Article 6(1)(f) GDPR.

Email contact

The address mail@falkbaumhauer.com runs on IONOS Mail Business. The mail servers are mx00.ionos.de and mx01.ionos.de.

There is no form. An email link opens the mail program on the visitor's own device. No message is transmitted by opening the link. That happens only when the email is sent. What is processed is the information contained in the message itself. The legal basis is Article 6(1)(b) GDPR where the message concerns a contract or steps before a contract, otherwise Article 6(1)(f) GDPR for handling the enquiry. Messages are kept for as long as needed to handle them, or for as long as statutory retention duties require.

The email link appears only on/de/legal-notice/,/en/legal-notice/,/de/privacy/, and/en/privacy/. Those are the legal notice and this privacy notice, in both languages. It does not appear on the home pages, in the footer, or on the about page.

What does not take place

The pages of this website are delivered as static HTML and CSS.

The HTML that is delivered does not set cookies.
It stores nothing in the browser's local storage.
It loads no fonts, scripts, images, or frames from other servers. The font is self-hosted and served by this website (falkbaumhauer.com). No data is sent to third parties for that. Google Fonts and other external font sources are not included.
It contains no form and no analytics script. The HTML includes one short script only for the animation of the two-line text under the name. That script does no tracking, sets no cookies, uses no storage, and makes no network requests.
It includes no advertising or fingerprinting services.
The website does not send direct marketing.
It makes no automated decision within the meaning of Article 22 GDPR.

An account is not required. Writing an email is voluntary. Log data arises when the page is requested. Possible evaluation by IONOS WebAnalytics is described above, including the pixel or log file that IONOS names as the means of collection.

External links

The home pages /de/ and /en/ link to three profiles. These are ordinary links. They embed no content and have no tracking parameters. Loading this website does not load anything from X, GitHub, or LinkedIn. A connection to the provider is made only when the link is opened. The provider's privacy notice then applies.

This page links to the same profiles and to each provider's privacy notice, again as ordinary links.

Rights of data subjects

The following rights exist against the controller. They can be exercised through the email address above.

Access, Article 15 GDPR
Rectification, Article 16 GDPR
Erasure, Article 17 GDPR
Restriction of processing, Article 18 GDPR
Notification of rectification, erasure, or restriction to recipients to whom data was disclosed, where Article 19 GDPR requires it
Data portability, Article 20 GDPR
Objection, Article 21 GDPR

Right to object under Article 21 GDPR

Where processing is based on Article 6(1)(e) or (f) GDPR, the data subject may object at any time, on grounds relating to their particular situation. This also applies to profiling based on those provisions. The controller will then no longer process the data unless the controller demonstrates compelling legitimate grounds which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.

Complaint to a supervisory authority

There is a right to lodge a complaint with a supervisory authority, in particular in the member state of habitual residence, place of work, or place of the alleged infringement, Article 77 GDPR.

The controller is established in Cologne. The supervisory authority for North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf, https://www.ldi.nrw.de. Information on how to lodge a complaint: https://www.ldi.nrw.de/beschwerde.