Privacy Policy

1. Controller

The controller under the EU General Data Protection Regulation (GDPR) is Manuel Villmer, Detmolder Str. 119, 33175 Bad Lippspringe, Germany. Email: manuel@manuelvillmer.com.

2. Hosting and server logs

This site is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes the data your browser sends: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is needed to deliver the site and protect it from attacks. The legal basis is my legitimate interest in a secure and reliable website (Art. 6 (1) (f) GDPR).

Cloudflare is certified under the EU-U.S. Data Privacy Framework, which covers transfers to the USA. Details are in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/

3. No cookies, no tracking

This site sets no cookies and uses no analytics, tracking or advertising services. Fonts are served from this site itself, so no requests go to font providers.

4. Contact by email

If you write to me, I process your email address, your name and the content of your message to answer you and, where it applies, to prepare or carry out a project (Art. 6 (1) (b) GDPR), otherwise based on my legitimate interest in answering inquiries (Art. 6 (1) (f) GDPR). I delete the messages when they are no longer needed, unless tax or commercial law requires me to keep them.

My email runs on Google Workspace, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details: https://policies.google.com/privacy

5. Booking a call

The buttons for booking a call lead to a booking page run by Fillout, Inc., USA. Only when you open it does Fillout process your data, under its own privacy policy: https://www.fillout.com/privacy. I receive the details you enter there, such as your name, email address and the time you choose, to prepare and hold the call (Art. 6 (1) (b) GDPR).

6. Links to other sites

This site links to LinkedIn and to the certificate pages of Airtable’s learning platform. These sites are not embedded. Data only goes to them when you click a link, and their own privacy policies apply from then on.

7. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on legitimate interest (Art. 21). To use these rights, an email to manuel@manuelvillmer.com is enough.

You also have the right to complain to a data protection authority (Art. 77 GDPR), for example the one responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, https://www.ldi.nrw.de/