Privacy Notice

This website is a static, personal site. It sets no cookies, runs no analytics, and loads no third-party content unless you ask for it by starting a video. The personal data processed is what your browser sends to the hosting provider to deliver the pages, what YouTube receives if you play a video, and whatever you send me when you get in touch. This notice explains all three.

Controller

The controller responsible for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is:

Kirsch IT Solutions
Owner (Inhaber): Julian Kirsch
Friedrich-von-Schiller-Str. 25
95444 Bayreuth
Germany

Email: [email protected]

Kirsch IT Solutions is a sole proprietorship operated by Julian Kirsch. Where this notice says “I”, it refers to Julian Kirsch acting for Kirsch IT Solutions.

No data protection officer has been appointed, as none is required for a site of this kind.

Hosting

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare’s European contact is Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.

When you open a page, your browser sends a request to Cloudflare’s servers. To deliver the page and keep the service secure, Cloudflare processes the data contained in that request: your IP address, the date and time of the request, the address of the page you requested, the referring page if your browser sends one, and your browser’s user agent string. Cloudflare may keep this data in server logs for a limited time for security and troubleshooting purposes. I have no access to individual visitor logs.

The legal basis for this processing is my legitimate interest in operating a reliable and secure website, Art. 6(1)(f) GDPR. The processing is necessary to deliver the site; without it, the pages cannot be shown.

Cloudflare acts as my processor under a data processing agreement pursuant to Art. 28 GDPR. Cloudflare operates servers worldwide and may process request data outside the European Economic Area. Transfers are safeguarded by the European Commission’s Standard Contractual Clauses and by Cloudflare’s certification under the EU-U.S. Data Privacy Framework. Details are in Cloudflare’s privacy policy.

Fonts

The fonts used on this site are served from the same hosting as the pages themselves. No request is made to a font provider such as Google Fonts, so no data is sent to third parties for that purpose.

YouTube videos

Some articles contain videos hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Until you click play, a video is shown as a still image stored on this site. Viewing the page makes no request to YouTube or Google.

When you click play, your browser loads the YouTube player from youtube-nocookie.com for that one video. Google then receives your IP address, the address of the page you are on, your browser’s user agent string and the fact that you started the video. YouTube may also store or read information on your device, for example in local storage or cookies, and record how you interact with the player. If you are signed in to a Google account, Google can associate this with your account.

The legal basis is your consent, given by clicking play after being told what it does: Art. 6(1)(a) GDPR, and § 25(1) TDDDG for storing or reading information on your device. The consent covers only the video you started, and only until you leave or reload the page; nothing about it is remembered on this site. To remove what YouTube stored on your device, clear the site data for youtube-nocookie.com and youtube.com in your browser.

For collecting your data and passing it to Google at the moment you click play, Google and I may be joint controllers under Art. 26 GDPR. For everything Google does with the data afterwards, Google alone is responsible. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision under Art. 45 GDPR. Details are in Google’s privacy policy.

If you would rather not load the player here, each video also has a link that opens it on youtube.com directly.

Cookies and local storage

This website does not set cookies. YouTube may set cookies or use local storage after you start a video, as described above.

If you switch between the light and dark theme, your choice is saved in your browser’s local storage so the site remembers it on your next visit. That value is stored on your device only, is never transmitted to me or to anyone else, and contains nothing that could identify you. Storing it is strictly necessary to provide a function you explicitly requested, so no consent is required under § 25(2) TDDDG. You can remove it at any time by clearing your browser’s site data.

Contact by email

If you write to me by email, I process your email address, your name if you provide it, and the content of your message in order to reply. The legal basis is Art. 6(1)(b) GDPR where the message concerns a contract or a request before one, and otherwise my legitimate interest in answering enquiries, Art. 6(1)(f) GDPR.

I keep correspondence for as long as it is needed to handle the matter and afterwards only where statutory retention obligations apply, for instance for business correspondence under commercial and tax law.

Links to other websites

This site links to external services such as GitHub and Codeberg. When you follow such a link, you leave this website and the operator of the destination becomes responsible for any data processing there. This site does not embed content from those services, so nothing is transmitted to them merely by viewing a page here.

Your rights

Under the GDPR you have the right to:

• obtain information about the personal data I hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (Art. 17) or its processing restricted (Art. 18),
• receive the data you provided in a portable format (Art. 20),
• object to processing based on legitimate interests, for reasons arising from your particular situation (Art. 21).

To exercise any of these rights, email [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You may also contact the authority in your own country of residence.

No automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place on this website.

Changes to this notice

I will update this notice if the way this website works changes. The current version applies as of 11 October 2026.