Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

André Schaller
Moserstraße 29
64285 Darmstadt
Germany
Email: andre@andreschaller.de

2. General information

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR) and this privacy policy. This site processes personal data only to the extent necessary to provide a functional website and its content and services.

3. Hosting

This website is a static site. Its source code is kept in a repository at GitHub, Inc.; the site itself is built and served by Netlify, Inc., which processes the data described under "Server log files" below on my behalf as a processor. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in the reliable and secure provision of this website).

Netlify is based in the United States, so personal data contained in server log files may be transferred to a third country. The transfer is safeguarded by the EU Standard Contractual Clauses contained in Netlify's Data Processing Addendum.

4. Server log files

The hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. These may include: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in the technically error-free presentation and optimization of the website).

5. Contact by email and contact form

If you contact me via the form or by email, the details you provide (including name, email address, and your message) will be stored for the purpose of processing your enquiry and in case of follow-up questions. The legal basis is Art. 6 (1)(b) GDPR where your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries).

Submissions from the contact form are received and stored by Netlify Forms, a service of Netlify, Inc., acting as processor on my behalf under the data processing agreement referred to above. The data is transmitted to Netlify's servers in the United States, safeguarded by the EU Standard Contractual Clauses. The form includes a hidden anti-spam field; its only purpose is to discard automated submissions. Your data is not used for any other purpose and is deleted once your enquiry has been dealt with and no statutory retention periods apply.

6. Fonts

The fonts used on this website (Sora, Inter and JetBrains Mono) are hosted on this website's own server and are loaded exclusively from it. No connection to Google servers is established, and no data is transmitted to Google when you visit this site.

7. Cookies, analytics and third-party content

This website does not set any cookies and does not use local or session storage. It uses no analytics, tracking, advertising or consent-management services, and embeds no third-party content such as fonts, maps, videos or social media plugins. Consequently, no cookie banner is required.

Links to external sites (for example LinkedIn, Xing or publication records) are plain hyperlinks. No data is transmitted to those providers unless you actively click the link, after which their own privacy policies apply.

8. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority. To exercise these rights, please contact the controller named above.

9. Right to object

Where processing is based on Art. 6 (1)(f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data.

10. Data security

This site uses TLS/SSL encryption for security reasons and to protect the transmission of confidential content. An encrypted connection is indicated by "https://" in the address bar of your browser.

Last updated: 2 October 2026