Privacy
Courtesy translation. The German version is legally binding. Template tailored to this site. It must be extended as soon as a newsletter, analytics or embeds are added.
In short: This site sets no cookies, loads no fonts from Google and uses no recognition of any kind. For anonymous reach measurement it uses Plausible — without cookies and without any identifier (see below). When you visit, the host creates technically necessary log data. Nothing else happens.
Controller
Ferdi Lethen-Oellers, address and contact see thelegal notice.
Hosting and server logs
The site runs on Azure Static Web Apps by Microsoft Corporation. When a page is requested, the host automatically processes transmitted data: shortened IP address, date and time, requested address, amount of data transferred, browser type and operating system. This data is technically required to deliver the site and keep it secure.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and stable operation of the site. Processing outside the EU cannot be ruled out; Microsoft relies on standard contractual clauses for this. A data processing agreement with Microsoft is in place.
Cookies
This site sets no cookies and uses neither local storage nor comparable techniques for recognition. That is why there is no consent banner. Should that change, consent will be requested beforehand.
Reach measurement with Plausible
To evaluate visits anonymously I use Plausible Analytics (Plausible Insights OÜ, Estonia; processing on servers in the EU). Plausible sets no cookies, assigns no device or personal identifier and builds no cross-site profiles. It collects aggregated data such as the page visited, referrer, approximate origin (country level), device type and browser. No conclusions about individual people are possible.
The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in shaping the content to what readers need. Since there is no recognition, no consent is required and there is no cookie banner.
Conclude a data processing agreement with the provider and reference it here before the site goes live.
Fonts
All fonts are served from this site's own server. There is no connection to Google Fonts or other providers; your IP address is not transmitted to them.
Newsletter “m365 Macchiato”
Sign-up uses double opt-in: after entering your address you receive an email with a confirmation link. You only receive the newsletter after confirming. Unconfirmed sign-ups are deleted automatically after 48 hours.
Stored are your email address, the language you chose, the times of sign-up and confirmation and the version of the consent text. To prevent abuse of the form, I count sign-ups per IP address and hour. The IP address is only stored as a hash with a random value that changes daily; the counters are deleted after two days at the latest.
The legal basis is your consent under Art. 6(1)(a) GDPR, for abuse prevention Art. 6(1)(f) GDPR. You can withdraw your consent at any time via the unsubscribe link in every issue; your address is then deleted immediately.
Sign-up and sending run on Microsoft Azure services: Azure Functions and Azure Storage in the West Europe region, email delivery via Azure Communication Services with data location Germany. A data processing agreement with Microsoft is in place. Processing outside the EU cannot be ruled out; Microsoft relies on standard contractual clauses. Operational logs contain no email addresses and are deleted after 30 days.
I don't measure whether or when you open the newsletter or click links. The emails contain no tracking pixels. I don't pass your address on.
Contact
If you write to me by email, I process your details to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is deleted as soon as it is no longer needed and no retention obligation applies.
Your rights
- Access to the data stored about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interests (Art. 21)
- Complaint to a supervisory authority (Art. 77)
The supervisory authority of your federal state is responsible; for me, it is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Use of AI tools
I use AI tools as writing aids when creating articles. Every article is reviewed by me before publication; editorial responsibility lies with me personally. Your data does not flow into these tools.