impressum / privacy policy

Privacy Policy

Last updated: May 19, 2026.

Controller

The controller responsible for this website under the EU General Data Protection Regulation (GDPR) is Henry Gressmann. Contact information is available in the Impressum/Legal Notice .

General Information

This is a private website and blog. I process personal data only where it is necessary to provide this website, keep it secure, respond to messages, or understand basic, privacy-friendly usage statistics. I do not sell personal data.
This website does not intentionally set tracking cookies. If this changes, this privacy policy will be updated accordingly.

Your data protection rights

As a data subject, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing of your personal data. If processing is based on consent, you may withdraw that consent at any time with effect for the future.
Please send requests, objections, or withdrawals informally to: contact@henrygressmann.de .
You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for me as the controller.
A list of supervisory authorities (for the non-public sector) with address can be found at www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html .

Contact by Email

If you contact me by email, I process the data you provide, such as your email address, name, message content, and technical metadata, to respond to your request. The legal basis is Art. 6 para. 1 lit. f GDPR. If your message relates to a contractual or pre-contractual matter, the legal basis may also be Art. 6 para. 1 lit. b GDPR.
I keep email correspondence only as long as necessary for the relevant purpose, unless legal retention obligations apply.

Meetings

The meeting page embeds Cal.com. When you visit that page or schedule a meeting, personal data such as your IP address, browser information, name, email address, selected time, and message content may be processed by Cal.com. This is used to provide scheduling functionality. The legal basis is Art. 6 para. 1 lit. f GDPR, and where scheduling concerns a contractual or pre-contractual request, Art. 6 para. 1 lit. b GDPR.
Cal.com's privacy policy is available at cal.com/privacy .

Analytics

This website uses a privacy-friendly analytics. The analytics are used to understand basic usage of this website and improve its content and technical performance. The legal basis is my legitimate interest under Art. 6 para. 1 lit. f GDPR.
Analytics data is processed in anonymized or aggregated form. I do not use the analytics setup to create personal profiles, track visitors across third-party websites, or store persistent personal identifiers. No analytics cookies are intentionally set by this website.

Hosting

To deliver this website, technical access data may be processed in server log files. This can include your IP address, date and time of the request, requested URL, referrer, HTTP status code, amount of data transferred, and information about the browser and operating system. This processing is necessary to display the website and ensure stability, performance, and security. The legal basis is Art. 6 para. 1 lit. f GDPR.

I use the following providers to make this website available:


Hetzner Online GmbH

Industriestr. 25, 91710 Gunzenhausen
www.hetzner.com/de/rechtliches/datenschutz


GitHub Pages

GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. GitHub Pages may be used to host static files such as images, fonts, JavaScript, and documents. GitHub may process technical access data for this purpose. This is in line with my legitimate interest under Art. 6 para. 1 lit. f GDPR, so that I do not have to operate all infrastructure myself. The server location may be the USA. For further information on how to object or remove data on GitHub, you can check: docs.github.com/en/github/site-policy/github-privacy-statement
You have the right to object to this processing. Whether the objection is successful needs to be determined through a balancing of interests. The data will be deleted as soon as the purpose of its processing has been fulfilled, unless legal retention obligations apply. Processing of the data specified in this section is neither legally nor contractually required. However, the functionality of the website is not guaranteed without this processing. GitHub has implemented compliance measures for international data transfers, including EU Standard Contractual Clauses (SCCs). More info can be found at: https://docs.github.com/en/site-policy/privacy-policies


Cloudflare

Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 München, Germany (Cloudflare)

I use the Content Delivery Network (CDN) provided by Cloudflare to enhance the security and delivery speed of this website. This aligns with my legitimate interest (Art. 6 para. 1 lit. f GDPR). A CDN is a network of globally distributed servers capable of delivering optimized content to website users. For this purpose, personal data may be processed in Cloudflare's server log files. Please refer to the "Hosting" section for more details.
Cloudflare acts as a recipient of your personal data and serves as a processor on my behalf. This is also in line with my legitimate interest under Art. 6 para. 1 lit. f GDPR, as it allows me to not operate a CDN myself.
You have the right to object to the processing. Whether the objection is successful will be determined through a balance of interests assessment.
The processing of data specified in this section is neither legally nor contractually required. However, the functionality of the website cannot be guaranteed without this processing.
Your personal data will be stored by Cloudflare for as long as necessary for the stated purposes.
For more information on objection and deletion options against Cloudflare, please refer to: Cloudflare DPA
Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: www.cloudflare.com/cloudflare_customer_SCCs-German.pdf .

External Links

This website links to external websites such as GitHub, LinkedIn, Cal.com, and project pages. If you follow those links, the respective third-party providers are responsible for their own data processing.