privacy

1. Overview

Protecting your personal data is important to me. This privacy policy explains what data is processed when you visit this website, for what purpose and on what legal basis, in accordance with the EU General Data Protection Regulation (GDPR).

In short: this website does not use advertising or social media plugins, and it does not load any content from third-party servers. Fonts, images and scripts are all hosted on this server. Personal data is processed to deliver the website, when you contact me by e-mail, and for anonymous visitor statistics with the self-hosted tool Matomo – without cookies, and you can opt out at any time.

2. Controller

The controller responsible for data processing on this website is:

3. Hosting and server log files

This website is hosted by an external provider:

When you visit this website, the hosting provider's server automatically records information that your browser transmits (server log files):

• IP address of the requesting device
• date and time of the request
• page or file requested
• referrer URL (the previously visited page)
• browser type and version, operating system
• amount of data transferred and HTTP status code

This data is required to deliver the website securely and reliably, to detect attacks and to fix technical errors. It is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in the technically error-free and secure provision of this website. Log files are deleted after 7 days at the latest, unless further retention is required for evidence purposes in a specific security incident.

I have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR, which ensures that your data is only processed on my instructions and in compliance with the GDPR.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar and the lock symbol. Data you transmit to this website cannot be read by third parties while encryption is active.

5. Contact by e-mail

If you contact me by e-mail, I process the data you provide (e.g. your e-mail address, name and the content of your message) in order to handle your enquiry and any follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, and Art. 6 (1) (f) GDPR in all other cases; my legitimate interest lies in responding to enquiries addressed to me.

Your data will be deleted once your enquiry has been fully dealt with and there is no further reason to store it, unless statutory retention obligations (e.g. under commercial or tax law) apply.

6. Web analytics with Matomo (cookieless)

To understand how this website is used and to improve it, I use the open-source web analytics software Matomo. Matomo runs on my own server (analytics.max-tank.de); the data is not passed on to third parties or transferred to countries outside the EU.

No cookies, no device fingerprinting

Matomo is configured so that it does not set any cookies and does not store anything on your device. It also does not read device features such as screen resolution, installed plugins or other browser details beyond what your browser sends with every page request anyway. Returning visitors are therefore not recognised, and no profile of you is created across visits.

Processed data

Anonymised IP address (the last two bytes are removed, so it cannot be traced back to you), date and time of the visit, pages visited and time spent on them, referrer URL, links clicked, browser and operating system (from the user agent your browser sends), device type and language settings.

Legal basis and your right to object

The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in the anonymous analysis of how this website is used in order to improve it. You can object to this at any time with effect for the future using this button:

opt out of statistics

Your choice is stored in your browser's local storage (Section 25 (2) No. 2 TDDDG); it contains no personal data and is not transmitted to any server. If you delete your browser data, the opt-out is removed as well. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, no data is recorded at all.

Storage period

The raw data is deleted after months at the latest; only aggregated, anonymous statistics are kept beyond that.

7. Cookies and external services

This website does not set any cookies. No advertising networks, social media plugins or embedded third-party content (such as videos or maps) are used. Fonts are hosted locally on this server, so no connection to font providers such as Google Fonts is established. Links to social media profiles (Instagram, LinkedIn) are plain links: data is only transferred to these services when you click them.

8. Your rights

Under the GDPR you have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)

To exercise these rights, simply send an e-mail to contact@max-tank.de.

Right to object

Where data is processed on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

9. Changes to this privacy policy

I may update this privacy policy if the website or the legal situation changes. The current version is always available on this page.