Privacy policy: website, forms and newsletter

This English translation is provided for convenience. In the event of any discrepancy, the German version prevails.

Last updated: October 14, 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Jannik Reinhard
Bürgermeister-Stöcklein-Straße 1
76855 Annweiler am Trifels
Germany
Email: Jannik.Reinhard@outlook.de

2. General information on data processing

We generally only process personal data of our users to the extent that this is necessary to provide a functional website and our content or if you have consented to this. The legal basis is in particular Article 6 Paragraph 1 lit. a (consent), lit. b (contract/initiation), lit. c (legal obligation) and lit. f GDPR (legitimate interest).

3. Cloudflare hosting and database

This website is served through Cloudflare Workers and the global delivery network of Cloudflare, Inc., USA. Newsletter subscriptions, comments and delivery jobs are stored in Cloudflare D1. The database was provisioned with the EU jurisdiction. This does not imply that all connection, security or support data is processed exclusively in Europe. Cloudflare processes IP addresses, requested resources, timestamps and technical browser information to operate and protect the service. The legal basis is Article 6(1)(f) GDPR. See the Cloudflare Privacy Policy and Cloudflare Customer DPA for processing and international-transfer information.

4. Security and abuse prevention

Contact and subscription forms use Cloudflare Turnstile, which processes technical browser and connection signals to detect automated abuse. Our application stores a keyed hash of the IP address for short-lived rate limits; these entries expire within 20 minutes. The full IP address is not stored in our form or subscriber tables. Cloudflare may separately process connection data. The legal basis is Article 6(1)(f) GDPR. See the Turnstile Privacy Addendum.

5. Images and fonts

Images, logos, fonts and PDF books used by the site are generally served from this website through Cloudflare as described in section 3. Displaying these files does not require a connection to Google Fonts or the former WordPress image CDN.

6. Cloudflare Web Analytics

With your consent, we use Cloudflare Web Analytics to measure page views, visits, referring pages, countries, browser and device categories, loading times and Core Web Vitals. According to Cloudflare, the service uses no tracking cookies and makes no session recordings. Cloudflare also processes technical connection data when the script is loaded and measurements are transmitted. Section 3 describes the provider and international transfers. Further information: Cloudflare Web Analytics.

The analytics script loads only after you select “Allow analytics”. The legal basis is Article 6(1)(a) GDPR. You can withdraw consent for future processing through “Analytics settings” in the footer. Refusing does not restrict your use of the website. Matomo and Microsoft Clarity are not enabled.

7. Storage on your device

The URL determines the language. Your analytics choice is stored locally in your browser as jr-analytics-consent-v2 until you change it or clear your browser data. We use this storage to respect your choice. You can change it in the footer. External videos load only after you click them.

8. Comments

Comments are disabled. The website does not accept new comments or display existing comments. Comments imported from the former WordPress site are retained as a non-public backup. To request access or deletion, contact the controller in section 1.

9. Newsletter and free books

For newsletter subscriptions, we store your email address, language, selected interests, subscription and confirmation status, timestamps and the version of the signup notice. New subscriptions become active only after the confirmation link is clicked (double opt-in). Unconfirmed subscriptions are deleted after 30 days. Existing subscriptions were migrated with their original delivery status; paused, unconfirmed or email-unsubscribed addresses are not activated by migration.

To administer the newsletter, confirmed subscriptions are also stored in a private list in Notion (Notion Labs, Inc., USA). This includes email address, language, selected interests, signup and confirmation timestamps, source and subscription status. Unsubscriptions are reflected in that list. The legal basis is Article 6(1)(a) GDPR. Notion may process data outside the European Economic Area. See the Notion Privacy Policy and Notion Trust Center for processing and international-transfer information. The list is not publicly accessible.

Email is sent through Resend, operated by Plus Five Five, Inc., USA. Resend receives the recipient address, subject, message content and technical delivery information. The configured sending region is Ireland; this does not guarantee exclusively European processing of all data. See the Resend Privacy Policy and Resend DPA including Standard Contractual Clauses. Open and click tracking for these emails is disabled.

The legal basis for the newsletter is Article 6(1)(a) GDPR. Each newsletter email includes an unsubscribe link to withdraw consent for future messages. A minimal suppression record may remain to respect your choice and prevent further delivery. Message contents are removed from successfully processed delivery jobs after 30 days. The three offered book files are complete English PDF editions. A confirmed signup through the book pages receives their download links.

10. Contact and meeting booking

The contact form processes your name, email address, optional organization, selected topic and message so we can reply. The message is sent through Resend to the controller’s mailbox. Contacting us does not subscribe you to the newsletter. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) otherwise. Correspondence is deleted when no longer needed, subject to statutory retention requirements.

“Book a conversation” opens Microsoft Bookings. Data is processed by that external service when you visit it. See the Microsoft Privacy Statement.

11. YouTube videos

Embedded videos load only after an intentional click. This connects to YouTube/Google and transmits your IP address and technical browser information, among other data. The legal basis is Article 6(1)(a) GDPR. See the Google Privacy Policy.

12. External links

Links to social networks, sponsors, “Buy Me a Coffee” and other services open external websites. Each provider is responsible for processing on its site. An ordinary link loads that service only when followed.

13. Encrypted transmission

This website uses HTTPS/TLS to encrypt data in transit. The address begins with https://.

14. Your Rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection against processing based on Article 6(1)(f) GDPR (Art. 21). You can revoke your consent at any time with future effect. To do this, please contact the address given in point 1.

15. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular with the authority responsible for our headquarters:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34, 55116 Mainz
https://www.datenschutz.rlp.de

16. Updates

This privacy policy will be adjusted as soon as data processing changes. The current version published here applies.

May Cloudflare measure page views, visits and loading times? The analytics service uses no tracking cookies or session recordings. You can change your choice in the footer at any time.

Privacy details