Privacy policy

Privacy at a glance

Protecting your personal data matters to me. This website deliberately does without tracking, analytics, advertising and embedded third-party content. Fonts and icons are served from this server – no data is sent to third parties such as Google when you visit.

Below you’ll find out which data is processed when you visit this website or get in touch.

Controller

The controller responsible for data processing on this website is:

Jeremy Thelen
Benediktusgasse 5
50679 Cologne, Germany
Email: contact@jeremythelen.de

Hosting

This website is hosted by [HOSTING PROVIDER, ADDRESS]. The provider processes the data transmitted when you visit on my behalf. A data processing agreement pursuant to Art. 28 GDPR is in place.

Server log files

When you visit the website, information transmitted by your browser is collected automatically: IP address, date and time of the request, requested page, referrer URL, browser type and operating system.

Processing is based on Art. 6(1)(f) GDPR. My legitimate interest is the secure and stable operation of the website. Log files are deleted after [NUMBER] days unless they are needed to investigate a security incident.

Contact form

If you write to me via the contact form, I process your name, email address and message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

To protect against spam and abuse, a hash of your IP address is stored briefly (a few minutes) to limit the number of requests.

The message is stored in a database on the server of this website and additionally delivered to me by email via [EMAIL/SMTP PROVIDER]. Your data is deleted once your request has been fully handled, unless statutory retention obligations apply – automatically after 12 months at the latest.

Contact by email

If you send me an email, I process the data it contains to handle your request (Art. 6(1)(b) or (f) GDPR). My mailbox is hosted by [EMAIL PROVIDER].

Appointment booking and Google Calendar

If you book an appointment via the website, I process your name, email address, optionally your phone number and the details of your request in order to hold the appointment (Art. 6(1)(b) GDPR). To protect against abuse, a hash of your IP address is stored briefly – just like with the contact form.

I manage my appointments in Google Calendar. For this, the data is transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and stored there as a calendar entry. A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework. Simply viewing the free slots does not transfer any of your data to Google – the website only queries my busy times.

The booking is also stored in a database on the server of this website, and you will receive a confirmation by email. Your data is deleted once the appointment has taken place, unless there is further collaboration or a statutory retention obligation – automatically 12 months after the appointment at the latest.

Cookies and local storage

This website does not use tracking or marketing cookies. Technically necessary storage only happens in the following cases:

• Language choice: if you switch the language, your choice is stored for one year in a cookie (“lang”) so the website appears in that language afterwards. The cookie only contains the language code.
• Password protection: if the website is temporarily password-protected, a cookie (“site_access”) remembers for 30 days that you entered the correct password. It only contains a check value, not the password.
• Theme choice: if you switch between the light and dark theme, your choice is saved in your browser’s local storage (localStorage). This information never leaves your device.
• Contact form and booking: when you submit them, a security token protects against cross-site request forgery and – only for the success message – a session cookie is set, which is deleted when you close your browser.

This storage is strictly necessary for a function you explicitly requested (§ 25(2) no. 2 TDDDG), so no consent is required.

Fonts and icons

Fonts (Inter, JetBrains Mono) and icons are loaded directly from this server. There is no connection to Google Fonts, CDNs or any other external service.

External links

This website links to external services such as GitHub and LinkedIn. Only when you click such a link do you leave this website; from then on, the privacy policy of the respective provider applies. No data is sent to these providers beforehand.

SSL/TLS encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR) at any time. Just send me an email.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Changes

I update this privacy policy whenever the website or legal requirements change. The version published here applies.

Last updated: October 2026