Privacy.

1. Controller and contact

You can use this address for privacy questions or to exercise your rights.

2. Website delivery and security

The website is provided through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit, Cloudflare receives technically necessary connection and request data, particularly your IP address, requested URL, date and time, and browser and device information. This processing enables page delivery and protection against attacks.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to provide this personal website reliably and securely. The website’s own code uses no advertising or analytics tools.

Cloudflare may also process data outside the EU or the European Economic Area and use subprocessors. Its published Data Processing Addendum describes the safeguards provided for this, including EU Standard Contractual Clauses for relevant transfers. Further information: Cloudflare privacy policy and Data Processing Addendum.

The provider’s retention of technical data depends on what is required for delivery and security and, where applicable, legal obligations. No single fixed deletion period for all Cloudflare processing is promised here.

3. Photos, fonts and browser storage

Your browser loads photos, map libraries and country outlines from this website. Local system fonts are used. There are no embedded social media profiles, external font services, advertising pixels, user accounts or newsletters.

The website’s own code sets no cookies and stores no settings in Local Storage or Session Storage. Technically necessary security functions of the hosting provider may be independent of this. Your browser may cache page files and images in the usual way; you can control cache duration and deletion in your browser.

On the signature page, you can use a button to copy the provided signature to your clipboard. This takes place locally in your browser. Existing clipboard content is neither read nor transmitted to me or a server.

4. World map and optional detailed map

The base map, place list and photos are loaded through this website. Search and country filtering run in your browser. The map application does not send your search terms to an external search service or request your device location.

Only after you explicitly agree following the activation notice does your browser load detailed map images from tile.openstreetmap.org. The provider is the OpenStreetMap Foundation (OSMF), United Kingdom. In particular, your IP address, browser information, referring page, request time and requested map areas are transmitted. OSMF may use service providers and an internationally distributed delivery infrastructure.

The legal basis for the optional data transfer initiated by me is your consent under Article 6(1)(a) GDPR. The base map, pins and photos remain usable without consent. “Hide detailed map” withdraws activation for further map requests on this page. Data already transmitted cannot be retrieved by doing so; the lawfulness of previous processing remains unaffected. The decision is not stored permanently. You will be asked again when switching it back on or reloading the page.

Further retention by the map service depends on its operational and security purposes. Information from the provider about processing, service providers and your rights is available in the OpenStreetMap Foundation privacy policy. No unconfirmed fixed deletion period for technical map requests is stated here.

5. Contact by email

The email address is provided for personal contact. If you email me, I use your sender address, message, any additional information or attachments you include, and technical delivery data to review your message and, where appropriate, communicate with you. I delete contact messages promptly when they are no longer needed. Please provide only the information necessary for your enquiry.

My mailbox is operated through Host Europe Professional Email Pro Light (powered by Titan). The provider is Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Köln. Host Europe and the service providers used for mail operation process messages for delivery, storage and mailbox security. Provider information: Host Europe privacy policy.

Host Europe states that Professional Email is hosted in a data centre in Frankfurt am Main. The platform is provided by Titan Solution Ltd SEZC, Cayman Islands. The published Titan documents describe additional service providers and possible international transfers; this does not establish that all data processing is confined to Germany. Further information: Host Europe product information, Titan privacy policy and Titan Data Processing Addendum.

If your email application loads the images in my signature, they are retrieved from Cloudflare Pages. The hosting provider may process technical request data, particularly the IP address of the requesting system and the time of the request (see section 2). The image URLs contain no individual recipient identifiers. I do not use them to track email opens or link clicks for individual recipients.

Where the processing falls within the scope of the GDPR, it is based on Article 6(1)(f) GDPR. My legitimate interest is personal communication and the appropriate handling of incoming messages. I retain data beyond that purpose only where a legal obligation or a specific legal claim requires it in an individual case.

6. External links

Instagram, LinkedIn and source references are ordinary links. Merely loading my pages does not retrieve content from these linked services. A connection to the respective provider is established only when you open a link. Its privacy information applies to processing on that website.

7. Your rights

Where the legal requirements are met, Articles 15 to 20 GDPR give you rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future.

Right to object: Where processing is based on legitimate interests, Article 21 GDPR allows you to object on grounds relating to your particular situation. Please write to andreas@burneleit.com.

You may also lodge a complaint with a data protection supervisory authority, particularly in your place of residence, workplace or the place of the suspected infringement. In Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information.

The website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.