Last updated: 8 September 2026
Controller and contact
Konstantin Stelzner, Kirchenwiese 30, 38120 Braunschweig, Germany. For privacy questions and requests concerning your rights, contact [email protected].
Website access, hosting and security
Accessing this website involves processing connection data: IP address, time, requested address, HTTP status, browser and device information and, where available, the referring page. This enables website delivery, troubleshooting and protection against abuse. The legal basis is my legitimate interest in secure, reliable operation under Article 6(1)(f) GDPR.
The website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany.
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, also provides website delivery and security services. As an intermediary network service, Cloudflare processes connection data. Processing may take place outside the EU/EEA. Cloudflare’s data processing agreement provides, among other safeguards, EU Standard Contractual Clauses for such transfers. Details: Cloudflare Data Processing Addendum and Cloudflare Privacy Policy.
Technical logs are retained only as long as needed for operation, troubleshooting and security. Specific security incidents may require longer retention for investigation and legal claims. netcup describes log types and default retention periods in its log policy.
Contact and project enquiries
When you use the contact form or write to me, I process your contact details, message and project information to handle and answer your enquiry. Article 6(1)(b) GDPR applies to enquiries concerning a potential contract; other enquiries are handled under Article 6(1)(f) GDPR based on my interest in communication.
The form uses Contact Form 7 and local honeypot spam protection (WP Armour). Additional technical form fields help detect automated submissions. Google reCAPTCHA is not loaded for this purpose. Enquiries are deleted once processing is complete and no further retention reason applies. If a business relationship results, statutory retention requirements also apply to the relevant records.
Browser storage
The pll_language cookie stores your language preference so the website can respect your choice of German or English. Its lifetime is up to one year; you can delete it at any time in your browser settings.
The breadcrumb navigation path is stored in the current browser tab’s Session Storage. It supports navigation within the site, is not transmitted to me as visitor analytics, and ends with the browser session. Strictly necessary storage access is based on Section 25(2) of the German TDDDG. Logging into the WordPress administration area also uses login and preference cookies.
YouTube videos
Embedded YouTube players are activated only when you click the permission control on the video. A local preview is displayed beforehand. Activation connects your browser to YouTube/Google and may transmit your IP address, device information and the page being viewed. The player uses privacy-enhanced mode through youtube-nocookie.com; this does not prevent all data transfers once playback is activated.
The provider for the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing in the USA is possible. Activation is based on your consent under Article 6(1)(a) GDPR and, where required, Section 25(1) TDDDG. You can end further connections by reloading or leaving the page; this does not reverse processing that has already occurred. More information: Google Privacy Policy.
Shared CVs and documents
For individually shared CV documents, views and downloads may be associated with the sharing link. Records contain the time, event type, a pseudonymous identifier derived from IP address and browser identifier, a broad device category and, where available, the referring domain. These event records do not store the raw IP address and use no tracking cookies. Events are scheduled for automatic deletion after 90 days.
This supports follow-up on my application and document communications based on my legitimate interest under Article 6(1)(f) GDPR. You may object for reasons relating to your particular situation and request a document version without view measurement. This CV measurement does not apply to regular portfolio pages.
External links
Links to Instagram, LinkedIn and other external sites open the respective provider only when clicked. That provider’s privacy information then applies.
Your rights
Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent for future processing. Where processing relies on legitimate interests, you may object for reasons relating to your particular situation. Contact the email address above to exercise these rights.
You may also complain to a data protection supervisory authority, particularly in the place of your habitual residence, work or the alleged infringement. The State Commissioner for Data Protection of Lower Saxony is a contact point for the controller’s address stated above.