Datenschutzerklärung
Privacy notice under the GDPR.
1. Controller
James Law, Berlin, Germany
james@jamesmaclaw.com
2. What this site collects
Nothing directly. This site sets no cookies, uses no analytics, has no contact form, and loads no fonts, images or scripts from third parties. Video, where a page has one, is described in section 4: nothing loads from the provider unless you press play. Typefaces, and the small amount of JavaScript the site uses, are served from this site’s own server. Visiting this site sends no data to any third party beyond the hosting provider named below.
This applies to the pages described here. The site also has a private administrative area, used only by me to edit content, which is not part of the public site and is not reachable by visitors.
3. Light and dark appearance
If you choose a light or dark appearance using the control in the header, that choice is saved in your browser’s local storage under the name theme. It holds only the word light or dark.
It never leaves your device, I cannot read it, and it contains no identifier of any kind. You can remove it by clearing this site’s data in your browser. Because it stores nothing but a display setting you asked for, it requires no consent. Make no choice and nothing is stored at all: the site simply follows your device’s own light or dark setting.
4. Video
Some pages may show a still image with a play button. Until you press it, nothing is requested from any video provider and no data about you leaves this site.
If you do press play, the video is loaded from Vimeo or from YouTube, and that provider will then receive your IP address and information about your browser, and may set cookies or similar identifiers. That happens only because you chose it. Vimeo is loaded with its Do Not Track setting and YouTube through its no-cookie domain, both of which reduce what they collect, but neither removes the transfer.
Legal basis: Art. 6(1)(a) GDPR, your consent, given by pressing play. Simply not pressing it means no data is transferred. Vimeo’s privacy policy: vimeo.com/privacy. Google’s: policies.google.com/privacy.
5. Hosting and server logs
This site is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, on Cloudflare Pages. When you open a page, Cloudflare’s servers process technical data including your IP address, the page requested, the time of the request, and your browser and operating system. This is necessary to deliver the site and to protect it from attack.
Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in operating a secure and functioning website. Cloudflare acts as a processor under a data processing addendum. Data may be transferred to the United States; Cloudflare is certified under the EU–U.S. Data Privacy Framework and additionally relies on the EU Standard Contractual Clauses. Cloudflare’s privacy policy: cloudflare.com/privacypolicy.
The site’s source files are stored in a private repository at GitHub, Inc. (USA), which Cloudflare reads in order to build the site. No visitor data reaches GitHub.
6. Email
If you write to me, I process the content of your message and your email address in order to reply. Mail to @jamesmaclaw.com is routed by Cloudflare, Inc. (USA) and delivered to a Google mailbox; both act as processors. Messages are kept for as long as needed to deal with the enquiry and any resulting work, and are then deleted.
Legal basis: Art. 6(1)(b) GDPR where the message concerns a possible engagement, otherwise Art. 6(1)(f), my legitimate interest in answering enquiries.
7. Your rights
You have the right to access your data (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw it at any time with future effect. To exercise any of these, email the address above.
8. Right to complain
You may complain to a data protection supervisory authority. The competent one here is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.