Privacy policy

1. Controller

mindactuate IT Daniel Gruner (Einzelunternehmer)

Email: daniel.gruner@mindactuate.com

2. Overview

This website is a personal portfolio. It has no contact form, no login and embeds no third-party content. Personal data is only processed as far as needed to deliver the site, or — for audience measurement — if you have given your consent.

3. Hosting and server log files

The website is served via Firebase Hosting by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit, Google processes technically necessary data such as your IP address, date and time, requested URL, referrer and browser information to deliver the site and keep the service secure.

The legal basis is my legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). Google acts as a processor (Art. 28 GDPR). A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).

4. Audience measurement with Google Analytics (consent only)

If you click “Accept” in the banner, I use Google Analytics 4 (via Firebase) by Google Ireland Limited to understand which pages are used and how. Without consent, Google Analytics is not loaded and no analytics cookies are set.

This processes, among other things, a pseudonymous identifier, pages viewed, time on page, device and browser information and your approximate location (derived from the truncated IP address; Google Analytics 4 does not store IP addresses). The cookies “_ga” and “_ga_<ID>” are set for up to 2 years.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. Analytics data is deleted automatically after 2 months (retention period set in Google Analytics).

You can withdraw your consent at any time with effect for the future: via “Cookie settings” in the footer, then “Decline”. The analytics cookies are deleted when you do.

5. Settings stored locally

Your browser's local storage (localStorage) keeps your chosen language, colour scheme (light/dark) and your audience-measurement choice. This data never leaves your browser. Storing it is strictly necessary for the functions you request (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

6. Fonts

All fonts are served from this website's own server. There is no connection to Google Fonts or any other font provider.

7. Contact by email

If you email me, I process your details (email address, name, message) to answer your request. The legal basis is Art. 6(1)(b) GDPR where it concerns a project or engagement, otherwise my legitimate interest in replying (Art. 6(1)(f) GDPR). I delete the data once it's no longer needed and no statutory retention obligations apply.

8. Links to other websites

This site links to external services such as LinkedIn or GitHub. These are plain links: no data is sent to those providers until you click one. Their privacy policies then apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time (Art. 7(3) GDPR). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for me: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, https://www.baden-wuerttemberg.datenschutz.de

10. Changes

I update this privacy policy when the website or the legal situation changes. The version published here applies.