Privacy policy
Who is responsible
Jakob Volbracht, Isestraße 79, 20149 Hamburg, Germany. Email: support@jakobvolbracht.com.
Visiting this site
This site is hosted by Cloudflare, Inc. (USA) on Cloudflare Pages. To deliver pages and keep the site secure, Cloudflare processes your IP address, the page you request, your browser's details and the time. Cloudflare also asks your browser to report failed connections back to Cloudflare (network error logging); these reports hold technical connection data and help Cloudflare keep its network running. Cloudflare decides how long it keeps this connection data and these reports, as set out in its privacy policy (cloudflare.com/privacypolicy). Legal basis: Art. 6(1)(f) GDPR, my interest in a secure, working website. This site sets no cookies and loads no third-party analytics or tracking scripts. CV downloads are counted, see below.
Fonts
All fonts are served from this site. Your browser does not contact any font provider.
Settings saved in your browser
When you change the colour theme or the game sound, your choice is saved in your browser's local storage. It stays on your device and is never sent to me. It only remembers what you chose (§ 25(2) no. 2 TDDDG). You can delete it in your browser's settings. Game scores are not saved.
CV downloads
When you download my CV, I record the time, which CV version you chose, your country and region (Cloudflare derives these from your IP address) and the domain of the website you came from, if your browser sends it. Your IP address is not stored. I use this to see which CV versions are useful. The records are kept in a Cloudflare database. Records older than 365 days are deleted automatically; the clean-up runs at least once an hour while the site is in use. Legal basis: Art. 6(1)(f) GDPR.
Contact form
When you use the contact form, your name, email address and message are sent to me by email through Plus Five Five, Inc. (Resend, USA) and delivered to my personal mailbox at Google (Gmail). The message is not saved in this website's database. Resend keeps email data for up to 30 days. To protect the form against abuse, a salted, shortened hash of your IP address serves as a counter for one to two hours; a daily total counter holds no personal data. Expired counters are deleted by the same hourly clean-up. I keep your message as long as I need it to answer you and deal with your request. Legal basis: Art. 6(1)(f) GDPR, my interest in answering you and in protecting the form; if your message is about a contract with me, Art. 6(1)(b) GDPR.
Mail to support@jakobvolbracht.com is forwarded by Cloudflare Email Routing to my personal mailbox at Google (Gmail) and kept there under the same rules as the contact form.
My mailbox
My mailbox is a personal Gmail account run by Google Ireland Limited. Google provides it under its own terms and privacy policy, not as a processor working on my instructions, and may process data in the USA (Google LLC is certified under the EU-US Data Privacy Framework).
Links to other websites
Links to LinkedIn, GitHub, Google Calendar (booking a call), ask-vault.com and deeptest.pages.dev are plain links. Nothing is loaded from those sites until you click. After that, their own privacy policies apply.
Recipients and transfers outside the EU
Cloudflare (hosting, database, email forwarding) and Resend (sending contact-form emails) process data for me under their data processing terms. Both are US companies certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR); their terms also include the EU standard contractual clauses (Art. 46 GDPR). For Google, see "My mailbox".
Your rights
Under the conditions set by law, you have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), and to receive it in a portable format (Art. 20). Email me to use any of these rights.
Right to object (Art. 21 GDPR): where I rely on Art. 6(1)(f) GDPR, you can object at any time, for reasons arising from your particular situation. I will then stop, unless I can show compelling legitimate grounds.
You can also complain to a data protection authority, for example the one responsible for me: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-hamburg.de.
Do you have to give me data?
No. The contact form needs a name, an email address and a message; without them it cannot be sent, and without an email address I cannot reply. I make no automated decisions and build no profiles.