Privacy policy

Last updated · 2026-10-19

This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Stephan Hannach
Neustrelitzer Straße 37
13055 Berlin
Germany

Phone: +49 30 221 845 15
Email: info@stephan-hannach.de
Website: https://stephan-hannach.de

2. General information

This website is purely informational. It contains no forms, no web analytics, no cookies and no embedded third-party content. I process personal data only where this is necessary for the operation and security of the website, or when you contact me by email or phone. The legal bases are Art. 6 GDPR and, where terminal equipment is concerned, Section 25 TDDDG.

Personal data is deleted as soon as the respective purpose no longer applies and no statutory retention obligations or legitimate reasons for further storage exist.

3. Hosting and server log files

This website runs on a server of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup provides the server and network connection.

Each time the website is accessed, the web server stores the following data in its access log: shortened IP address (IPv4 without the last octet, IPv6 only the first three blocks), date and time of access, requested resource (method, address and protocol), HTTP status code, amount of data transferred, referrer URL and user agent (browser and operating system). If a technical error occurs, the error log records the full IP address together with the failed request.

The purpose is the secure and reliable provision of the website, error analysis and attack detection. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in the stable and secure operation of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with netcup.

Server log files are deleted automatically after 14 days at the latest. Firewall logs, which may contain IP addresses, serve to defend against attacks and are deleted after 90 days at the latest.

4. SSL/TLS encryption

This website uses TLS encryption. You can recognise an encrypted connection by https:// in your browser's address bar.

5. Contact by email or phone

If you contact me by email or phone, I process the data you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR; my legitimate interest lies in answering enquiries.

Enquiries are deleted once they have been dealt with and no statutory retention obligations apply. If a business relationship results, retention periods of six or ten years may apply.

6. Links to other websites

This website links to arvex.one, LinkedIn and XING. Data is only transferred to these providers when you click a link; their privacy policies then apply.

7. Cookies and local storage

This website does not set cookies. If you switch between light and dark mode, your choice is stored under the name theme in your browser's local storage. This information is not transmitted to me and remains on your device until you delete the website data in your browser. Storage is necessary for the display you requested (Section 25 (2) No. 2 TDDDG).

8. Fonts and external content

The Mulish typeface is loaded from my own server. No fonts, scripts or other content from third parties are embedded. No web analytics or tracking takes place.

9. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

10. Your rights

Subject to the statutory requirements, you have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

You may also lodge a complaint with a data protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, www.datenschutz-berlin.de.

11. Changes

If the website or the data processing changes, I will update this privacy policy. The current version is always available on this page.