Privacy

Data controller

Ian Maurice Buck
IT consulting & software development
Lokstedter Weg 39
20251 Hamburg

Email: [email protected]

Website delivery

This static website is delivered through Cloudflare Pages (Cloudflare, Inc., USA). When you access it, Cloudflare processes technical connection data, particularly your IP address, requested URL, timestamp and browser information. This is necessary to deliver and protect the website. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is a secure and accessible website.

Cloudflare processes data on its global network. Data may therefore also be processed outside the EU. Cloudflare provides information about processing, retention and safeguards in its privacy policy and its Data Processing Addendum.

Email enquiries

When you write to me, I process your email address, message content and information you voluntarily provide to respond to your enquiry and, where appropriate, prepare a conversation or engagement. If you are a prospective contracting party yourself, the legal basis for pre-contractual processing is Article 6(1)(b) GDPR. If you write as a company representative or about another matter, processing is based on Article 6(1)(f) GDPR; my legitimate interest is communicating with prospective clients and business partners and responding to enquiries.

My business email is hosted by mailbox.org (Heinlein Hosting GmbH, Germany). Messages are retained for as long as needed to handle the enquiry or a subsequent engagement. Where statutory retention obligations apply, I follow those periods. Further provider information is available in the mailbox.org privacy policy.

For delivery and abuse prevention, mailbox.org logs the sender, recipient, message ID and message size. According to the provider, these SMTP logs are deleted after seven days; they do not store message content or subject lines. This period applies to technical logs, not the retention of your message in the mailbox.

Project video

The video on the Zukunftswerkstatt page is delivered from object storage provided by Hetzner Online GmbH (Germany), not from ian-buck.de. When it is requested, Hetzner processes technical connection data, particularly your IP address, requested file, timestamp and browser information. This is necessary to deliver the video. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is reliable, bandwidth-efficient delivery.

The preview image is hosted as a file on this website. The video is only loaded when you start it; no connection to object storage is made beforehand. Further information is available in the Hetzner privacy policy.

Consent management with Cookiebot

I use Cookiebot by Usercentrics A/S (Denmark) to obtain, store and document your choice regarding analytics technologies. For this purpose, Cookiebot processes in particular your consent decision, date and time, visited URL, IP address, and browser and device information. The technically necessary storage allows your choice to be implemented and documented.

According to Cookiebot, connection data processed to deliver the banner is not retained after that processing step. Separately, Cookiebot stores a consent identifier and your choice as evidence; both are also stored in a cookie on this website.

The legal basis is Article 6(1)(c) GDPR where processing serves statutory evidence obligations, and Article 6(1)(f) GDPR for the technically reliable operation of consent management. You can change or withdraw your choice at any time via “Cookie settings” in the footer. Further information is available in the Cookiebot privacy policy.

Analytics with PostHog

Only if you consent to the “Statistics” category do I use PostHog EU Cloud by PostHog, Inc. (USA) for website analytics. Data is collected through PostHog’s EU infrastructure. This includes page views, broad referral categories, selected campaign parameters from links, clicks on contact, service and project actions, and starting the project video. Analytics uses a pseudonymous browser identifier to associate visits with the same browser. Names, email addresses, message content and form inputs are not collected as event data.

After your consent, PostHog stores the identifier in cookies and local browser storage (Local Storage). Storage and access are based on section 25(1) TDDDG. When establishing a connection, your IP address is also technically transmitted to the service. Without statistics consent, PostHog is not loaded on this website.

With your statistics consent, clicks are also captured automatically and sessions are recorded to identify usability problems. The recording reconstructs the website and interactions; it is not a camera recording or screen capture of your device. Text and inputs are masked, and embedded videos and frames are excluded. Console logs and network content are not recorded. Heatmaps, surveys, person profiles and advertising audiences remain disabled. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw it at any time with future effect via “Cookie settings” in the footer. On withdrawal, the website stops collection and resets the local PostHog identifier. Further information is available in the PostHog privacy policy.

Cookie declaration

The following declaration is provided by Cookiebot based on the technologies found on this website.

Other services

This website has no contact form or embedded booking service. Fonts, the portrait and website program files are delivered as first-party files. External project and profile pages are only accessed when you follow the relevant link.

Your rights

Subject to the statutory requirements, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Please write to [email protected].

You may withdraw consent at any time with future effect. This does not affect the lawfulness of processing before withdrawal. You can use this website without consenting to analytics.

You may lodge a complaint with a data protection supervisory authority, particularly where you live, work or where the alleged infringement occurred. In Hamburg, this is the Hamburg Commissioner for Data Protection and Freedom of Information.