Privacy Policy

This Privacy Policy explains which personal data is processed when you visit this website or contact me. The website is a static Astro website and is hosted on Netlify.

Controller

Philip Bodenbach
Website: https://www.philipbodenbach.de
E-Mail: info@philipbodenbach.de

Hosting via Netlify

This website is hosted by Netlify:

Netlify, Inc.
44 Montgomery Street, Suite 300
San Francisco, CA 94104
USA

When this website is accessed, Netlify processes technical access data in order to deliver the website, operate the infrastructure and ensure the security of the service.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, fast and reliable provision of this website. Where Netlify processes personal data on my behalf, this is done on the basis of a data processing agreement under Art. 28 GDPR.

As Netlify is a provider based in the USA, a transfer of personal data to the USA cannot be ruled out. For international data transfers, Netlify refers to appropriate safeguards, in particular the EU-U.S. Data Privacy Framework and standard contractual clauses.

Server Log Files

When this website is accessed, the following data in particular may be processed in server log files:

• IP address
• date and time of access
• requested URL
• referrer URL, if transmitted by the browser
• user agent or browser information
• HTTP status code

This processing is technically necessary to provide the website, analyze errors and prevent misuse. The legal basis is Art. 6(1)(f) GDPR.

Contact by E-Mail

The website contains e-mail links.

If you contact me by e-mail, I process the information you provide, in particular your e-mail address, the content of the message and the time of communication. The processing is carried out to handle your request.

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures. In all other cases, the legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in responding to your request.

External Links to GitHub and LinkedIn

This website contains external links to GitHub and LinkedIn. Merely visiting this website does not transfer any data to GitHub or LinkedIn.

Only when you click an external link do you leave this website. The respective provider and its technical service providers may then process personal data, for example your IP address, the time of access, browser data and, where applicable, account information if you are logged in there. The respective provider is responsible for this processing.

Display Setting

The website offers a switch for light and dark design. If you change the mode, your selection is stored in your browser’s local storage under the key pb-theme. This storage is used solely to apply your selected display setting again on your next visit. The legal basis for any processing of personal data is Art. 6(1)(f) GDPR.

SSL/TLS Encryption

This website is provided over encrypted HTTPS. This protects data transmitted between your browser and the website according to the state of the art.

Legal Bases for Processing

Depending on the processing, the following legal bases may apply:

• Art. 6(1)(a) GDPR, if consent is obtained.
• Art. 6(1)(b) GDPR, if processing is necessary for pre-contractual measures or a contract.
• Art. 6(1)(c) GDPR, if there is a legal obligation.
• Art. 6(1)(f) GDPR, if processing is necessary to protect legitimate interests, in particular for secure website operation, server log files, responding to general inquiries and the display setting.

Retention Period

Personal data is stored only for as long as necessary for the respective purpose. It is then deleted unless statutory retention obligations, security interests or legal claims prevent deletion.

Server log files are stored, where this can be influenced, only for as long as necessary for operation, security and error analysis. E-mail inquiries are deleted once they have been finally processed and no statutory retention obligations prevent deletion. Business correspondence may be retained in accordance with commercial and tax law requirements.

Rights of Data Subjects

Under the GDPR, you have in particular the following rights:

• access to the personal data processed under Art. 15 GDPR
• rectification of inaccurate data under Art. 16 GDPR
• erasure under Art. 17 GDPR
• restriction of processing under Art. 18 GDPR
• data portability under Art. 20 GDPR
• objection to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR under Art. 21 GDPR

To exercise your rights, a message to info@philipbodenbach.de is sufficient.

Right to Object

If personal data is processed on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.

The affected data will then no longer be processed unless there are compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defense of legal claims.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

Current Status and Changes to this Privacy Policy

This Privacy Policy may be adjusted if the website, the services used or legal requirements change.

Last updated: January 2026