Privacy Policy

1. Controller

Christian Friedrich Holsteinische Strasse 52 Berlin, 10717, Germany

2. Overview of Data Processing

This website (christianfriedrich.org) is a static website without user accounts, contact forms, comment functions, or tracking. As little personal data as technically possible is processed.

3. Hosting and Server Log Files

3.1 Hosting Provider

This website is hosted by Reclaim Hosting, LLC, a US-based hosting provider located in Fredericksburg, Virginia, USA.

Provider: Reclaim Hosting, LLC, 2324 Plank Rd, Fredericksburg, VA 22401, USA Website: https://www.reclaimhosting.com

3.2 Server Log Files

When you access this website, the web server automatically records information in so-called server log files, which your browser transmits automatically. This includes:

IP address of the requesting device
Date and time of access
Requested URL / page
Browser and operating system used (user agent)
Referrer URL (previously visited page)
Amount of data transferred
HTTP status code

This data is processed to ensure the secure and stable operation of the website and to detect and prevent attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and functionality of the website).

Storage duration: Server log files are typically deleted automatically by the hosting provider after 14 days. No personal evaluation of the data takes place.

3.3 Data Transfer to the USA (Third Country)

Reclaim Hosting processes data on servers in the USA. The USA is a third country within the meaning of the GDPR. The transfer is based on:

the EU-U.S. Data Privacy Framework (DPF), provided the provider is certified, or
Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Reclaim Hosting provides a Data Processing Agreement (DPA) with Standard Contractual Clauses. Further information: https://www.reclaimhosting.com/contracts/data-processing-agreement/

4. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock icon in your browser bar.

5. Fonts

This website uses locally hosted fonts. No connection to external font services (such as Google Fonts) is established. No data is transmitted to third parties when loading the fonts.

6. External Links

This website contains links to external websites:

LinkedIn (linkedin.com)
Mastodon (mastodon.social)
sicherheitsluecke.fm
hamburgwaswillstduwissen.de
blog.christianfriedrich.org (WordPress blog, separate subdomain)

By clicking on these links, you leave this website. The respective provider is responsible for data processing on the linked sites. I have no influence on their data protection practices.

Note: The blog at blog.christianfriedrich.org is an independent WordPress installation with its own privacy policy.

7. Contact via Email

If you contact me via email (me@christianfriedrich.org), the data you provide (e.g., name, email address, content of the message) will be stored by me to process your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).

Storage duration: Your data will be deleted after your inquiry has been fully processed, unless statutory retention obligations apply.

8. No Cookies, No Tracking, No Analytics Tools

This website does not set any cookies, does not use any analytics or tracking tools (no Google Analytics, no Matomo, no Plausible, etc.), and does not embed any social media plugins.

9. No Forms

This website does not contain any contact forms, registration forms, or other forms. Contact is made exclusively via the provided email address.

10. Your Rights

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

To exercise your rights, please contact: me@christianfriedrich.org

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) Friedrichstr. 219 10969 Berlin, Germany https://www.datenschutz-berlin.de

12. Changes to This Privacy Policy

This privacy policy is currently valid as of February 25, 2026.

Due to the ongoing development of the website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.