Datenschutzerklärung
Privacy notice under the GDPR.
1. Controller
James Law, Berlin, Germany
james@jamesmaclaw.com
2. What this site collects
Nothing directly. This site sets no cookies, runs no JavaScript, uses no analytics, has no contact form, and loads no fonts, images, embeds or scripts from third parties. Typefaces are hosted on this site’s own server. Visiting this site sends no data to any third party beyond the hosting provider named below.
3. Hosting and server logs
This site is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, on Cloudflare Pages. When you open a page, Cloudflare’s servers process technical data including your IP address, the page requested, the time of the request, and your browser and operating system. This is necessary to deliver the site and to protect it from attack.
Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in operating a secure and functioning website. Cloudflare acts as a processor under a data processing addendum. Data may be transferred to the United States; Cloudflare is certified under the EU–U.S. Data Privacy Framework and additionally relies on the EU Standard Contractual Clauses. Cloudflare’s privacy policy: cloudflare.com/privacypolicy.
The site’s source files are stored in a private repository at GitHub, Inc. (USA), which Cloudflare reads in order to build the site. No visitor data reaches GitHub.
4. Email
If you write to me, I process the content of your message and your email address in order to reply. Mail to @jamesmaclaw.com is routed by Cloudflare, Inc. (USA) and delivered to a Google mailbox; both act as processors. Messages are kept for as long as needed to deal with the enquiry and any resulting work, and are then deleted.
Legal basis: Art. 6(1)(b) GDPR where the message concerns a possible engagement, otherwise Art. 6(1)(f), my legitimate interest in answering enquiries.
5. Your rights
You have the right to access your data (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw it at any time with future effect. To exercise any of these, email the address above.
6. Right to complain
You may complain to a data protection supervisory authority. The competent one here is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.