Skip to main content

Data Privacy

I am very delighted that you have shown interest in my website (offer). With this privacy policy I inform you about the type, scope and purpose of the personal data processed by me and your rights as a data subject.

1. Responsible person #

Offer name: Philipp Kaste - digital business card
Responsible person: Philipp Kaste
Contact: info@philipp-kaste.de

2. Access the website (offer) #

The hosting provider collects the following data transmitted by your browser in log files:

IP address, the address of the previously visited website (referrer request header), date and time of the request, time zone difference to Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request comes and information about the browser and operating system.

This is necessary to display my website and to ensure stability and security. This corresponds to the legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.

There is no tracking and I have no direct access to this data.

I use the following hosting provider for the website:

GitHub Inc.
Product GitHub Pages
88 Colin P Kelly Jr St
San Francisco, CA 94107
United States

This is the recipient of your personal data. This corresponds to the legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR not to have to maintain a server on my premises. Server location is USA.

Further information on objection and removal options vis-à-vis GitHub can be found at https://docs.github.com/en/free-pro-team@latest/github/site-policy/github-privacy-statement#github-pages

You have the right to object to the processing. Whether the objection is successful must be determined as part of a balancing of interests.

The data will be deleted as soon as the purpose of the processing no longer applies.

The processing of the data specified in this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

GitHub has implemented compliance measures for international data transfers. These apply to all global activities where GitHub processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). Further information can be found at: https://docs.github.com/en/free-pro-team@latest/github/site-policy/github-data-protection-addendum#attachment-1-the-standard-contractual-clauses-processors

In principle, an order processing contract must be concluded with the hoster. The Bavarian State Office for Data Protection Supervision has made an exception for the hosting of purely static websites. If the website is used for self-presentation, e.g. by associations or small companies, no personal data flows to the operator and no tracking takes place, there is no order processing. It goes on to say: “The fact that IP addresses, i.e. personal data, must inevitably be processed even when hosting static websites does not lead to the assumption of order processing. That would not be appropriate. Rather, the (short-term) storage of IP addresses is still part of the website hoster’s telecommunications access provision under the TKG and primarily serves the hoster’s security purposes.” (https://www.lda.bayern.de/media/veroeffentlichungen/FAQ_Hosting_keine_Auftragsverarbeitung.pdf) I assume that this exception applies to GitHub Pages.

3. Your contact #

When you contact me by e-mail, the data you provide (your e-mail address, possibly your name and telephone number) will be processed by me in order to process your request. I will delete the data collected in this context when it is no longer required for the aforementioned purpose, provided that deletion does not conflict with any statutory retention obligations. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Contact details and your rights as a data subject #

Please contact me at any time if you have any questions or suggestions regarding data protection and the enforcement of your rights as a data subject.

Information and rectification #

You can obtain information from me at any time and free of charge as to whether personal data relating to you is being processed by me and also specifically which data about you is being stored, as well as requesting a copy of the stored data. You can also have incorrect data corrected and completed.

Erasure, restriction and the right to be forgotten #

You can request the erasure and restriction of your personal data. If deletion of your personal data is prevented by statutory retention obligations, your data will be marked with the aim of restricting its future processing.

Data portability #

Where applicable, you also have the right to have the personal data concerning you transmitted to you or to another controller in a structured, commonly used and machine-readable format, provided that the processing is based on consent or a contract and is carried out by automated means. However, this does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. You also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

Revocation / objection #

You can revoke your consent at any time with effect for the future at the above-mentioned contact address. contact address above.

Right to lodge a complaint #

You also have the right to lodge a complaint with the competent supervisory authority and to seek legal remedies. The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

Status: 09.09.2024