Privacy

The German version of this privacy policy is the legally binding reference; this English text is provided for convenience.

1 · Controller

The controller for the data processing on this website is:

Philipp Schäfer
Brucknerstraße 4
81677 Munich
Germany

Email

mail@philipp-schaefer.de

2 · Scope and principle

This policy applies to the website philipp-schaefer.de. The site is built for data minimisation: no tracking, no advertising, no analytics tools, no cookies.

Personal data is processed only where this is necessary for the technical operation of the website or for handling an enquiry.

3 · Your rights

Within the statutory requirements, you have the following rights as a data subject:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to the processing (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to the email address above is enough to exercise these rights.

Independently of this, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

4 · Hosting

This website is hosted with bunny.net, operated by BunnyWay, informacijske storitve d.o.o., Cesta Komandanta Staneta 4a, 1215 Medvode, Slovenia.

bunny.net processes the data arising when the website is accessed solely on instruction, as a processor within the meaning of Art. 28 GDPR; a corresponding data processing agreement is in place. Processing takes place within the European Union. The legal basis is Art. 6 (1) (f) GDPR – the legitimate interest in operating the website securely and reliably.

5 · Server log files

When the website is accessed, data is automatically stored in so-called server log files:

• anonymised (shortened) IP address
• date and time of the request
• page requested
• volume of data transferred
• referrer (the previously visited page)
• browser and operating system details

This data serves the technical operation, security and error analysis of the website. It is neither merged with other data sources nor evaluated for advertising purposes. The legal basis is Art. 6 (1) (f) GDPR. Log files are kept for up to 3 days and then deleted.

6 · No cookies, no tracking, no external resources

This is a static website. No cookies are set, no reach measurement takes place, and no usage profiles are created.

The only exception is the choice between light and dark design: if you use the toggle, a small script stores your choice (“light” or “dark”) in your browser’s local storage (localStorage) so that it applies on every page. This information never leaves your device, is not transmitted to me or to third parties, and can be deleted at any time in your browser settings. Without your choice nothing is stored; your operating system’s setting applies. The legal basis is Section 25(2) No. 2 TDDDG – storage is strictly necessary for this function you have expressly requested.

All resources – fonts, stylesheets and scripts – are loaded exclusively from this site's own domain and delivered via the bunny.net CDN acting as a processor. No Google Fonts, no third-party CDNs, no social media plugins and no other third-party embeds are used. Accessing the website therefore establishes no connection to third-party servers.

7 · Links to external services

The contact page carries two links that lead to third-party services: a booking page at SimplyMeet.me and my profile on LinkedIn. Both are plain links – no content from these providers is embedded in this website, and merely accessing this website transfers no data to them.

Only when you click one of those links do you leave this website. From that moment the respective provider's privacy notice applies; in particular, the provider receives your IP address and may set its own cookies. I have no influence on that processing.

8 · Getting in touch

If you get in touch by email or telephone, the details you provide are processed solely to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where the enquiry serves to initiate or perform a contract, and otherwise Art. 6 (1) (f) GDPR – the legitimate interest in responding to the enquiry.

The details are deleted as soon as they are no longer required for that purpose and no statutory retention obligations prevent it.

9 · Data security

Transmission between your browser and this website is encrypted throughout via TLS (HTTPS).

10 · Last updated

Last updated: 24 September 2026.

This privacy policy is revised whenever the processing described here changes – for instance because a feature is added or a service provider changes.