Privacy information pursuant to GDPR

Controller

Responsible for all processing activities on this website:

Jens Anders

Sole proprietorship – xcec.solutions

Zum Schildetal 12, 19260 Vellahn, Germany

Communication exclusively via Threema ID JDYZCM43

General information on processing

Personal data is processed only when legally permitted or when you have given consent. This includes data you actively provide (e.g. via contact) and data that is collected automatically when accessing the site.

Legal bases:

• • Art. 6 para. 1 lit. a GDPR (consent)
• • Art. 6 para. 1 lit. b GDPR (contract / pre-contractual steps)
• • Art. 6 para. 1 lit. f GDPR (legitimate interest: secure provision of the website)

Access data / server log files

When you visit the site, the following data is automatically processed by the hosting infrastructure:

• • IP address
• • Date and time of access
• • Requested page / file
• • Volume of transferred data
• • Referrer URL
• • Browser type and version
• • Operating system

Use of cookies

Cookies are only used when technically required or when you explicitly opt into an optional feature (e.g. external services).

Types of cookies:

• • Technically required cookies (session, security, login state)
• • Optional cookies (only with consent)

Contact

Communication runs exclusively through Threema. When you write to JDYZCM43, the following data is processed to handle the request:

• • Your Threema ID
• • Message content and attachments
• • Timestamp and metadata supplied by Threema
• • Optional additional details you decide to share

Analytics and telemetry

If privacy-friendly analytics is enabled (e.g. Matomo, Plausible or opt-in Google Analytics):

• • Only anonymised or pseudonymised usage data is processed.
• • IP addresses are truncated where required.
• • Tracking only takes place after your explicit consent.
• • You can withdraw consent at any time with effect for the future.

External services

If external content is embedded (fonts, maps, CDN assets, APIs), providers may receive the IP address to deliver content. Their respective privacy policies apply.

Typical examples (if used):

• • Hosting providers
• • CDN networks
• • Fonts (preferably self-hosted)
• • Map services
• • Newsletter platforms
• • API integrations

Hosting & technical infrastructure

The website runs with a European provider. Server log files, technical metadata, and IP addresses are processed under a data processing agreement pursuant to Art. 28 GDPR.

Security of processing

Technical and organizational measures (TOM) protect personal data:

• • Encrypted transmission (HTTPS/TLS)
• • Hardened servers
• • Access controls
• • Regular updates
• • Strong password policies and MFA
• • Logging of security-relevant events

Rights of data subjects

You are entitled to the following rights:

• • Access (Art. 15 GDPR)
• • Rectification (Art. 16 GDPR)
• • Erasure (Art. 17 GDPR)
• • Restriction (Art. 18 GDPR)
• • Data portability (Art. 20 GDPR)
• • Objection (Art. 21 GDPR)
• • Withdrawal of consent (Art. 7 para. 3 GDPR)
• • Right to lodge a complaint (Art. 77 GDPR)

Retention periods

Data is stored only as long as required for the stated purpose or as long as legal retention duties (e.g. commercial or tax law) demand.

Transfer to third countries

Transfers outside the EU/EEA occur only when technically unavoidable and based on adequacy decisions or appropriate safeguards (e.g. Standard Contractual Clauses). Where such services are used, it happens exclusively after consent.

Automated decision-making / profiling

No automated decisions or profiling in the sense of Art. 22 GDPR take place.

Changes to this notice

The notice may be updated when legal or technical requirements change. The current version is always available on this site.

Privacy contact

Requests regarding privacy, access, or withdrawal must be sent exclusively via Threema ID JDYZCM43.