DE EN
Contact
Back to home

Privacy Policy

Last updated: August 2026

This is a convenience translation. The legally binding version is the German privacy policy.

In short: this website sets no cookies and embeds no third-party content. It does measure which pages are read — using software that runs on my own server, works without cookies, and which you can object to with a single click. Beyond that, personal data is only processed if you contact me yourself — and in the technically necessary server logs.

1. Controller

The controller responsible for data processing on this website is:

Sven Brunn
Sven Brunn Mediasolutions
Stephanusstraße 29
41472 Neuss, Germany
Phone: +49 173 9069185
Email: info@sven-brunn.de

No data protection officer has been appointed, as the statutory requirements for doing so are not met.

2. Principle: no cookies, no third-party services

This website consists exclusively of static files. It sets no cookies and loads no content from third-party providers. Fonts, graphics, icons and scripts are served entirely from this website's own server. No map, video, social media or advertising services are embedded. For audience measurement I use software I operate myself, which works without cookies — details are set out under section 5.

For that reason there is no consent or cookie banner here: nothing is stored on your device and nothing is read from it, so § 25 (1) TDDDG does not apply. There is nothing that would require consent.

Only two items are stored locally, and each only once you trigger it yourself: your colour scheme preference (light or dark) and — should you object to audience measurement — the note recording that objection. Both are kept in your browser's local storage, are never transmitted to the server, contain no personal reference and can be deleted at any time via your browser settings. The legal basis for this purely functional storage is § 25 (2) no. 2 TDDDG.

3. Provision of the website and server logs

When you access this website, the web server automatically records information transmitted by your browser:

  • IP address of the requesting device
  • date and time of access
  • name and URL of the file retrieved
  • volume of data transferred and confirmation of successful retrieval
  • the previously visited page (referrer), where transmitted
  • browser used, its version and the operating system

This data is technically necessary in order to deliver the website, ensure its stability and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in secure and trouble-free operation. This data is not merged with other data sources and is not evaluated for advertising purposes.

Log data is deleted automatically after 30 days.

4. Hosting

This website is operated by an external service provider who supplies the servers and processes the log data described above on my behalf:

Serverprofis GmbH
Otto-Lilienthal-Ring 34–36
85622 Feldkirchen
Germany

A data processing agreement pursuant to Art. 28 GDPR is in place with this provider, ensuring that data is processed solely on my instructions and in accordance with the GDPR. The basis for engaging the provider is my legitimate interest in the professional provision of this website (Art. 6 (1) (f) GDPR).

5. Audience measurement

In order to understand which content on this website is actually read and by which routes visitors arrive here, I use the analytics software Matomo. It runs on a server I operate myself at analytics.sven-brunn.de — on the same machine as this website, with the provider named under section 4 and under the same data processing agreement. No further service provider is involved, no data is passed on to third parties, and no transfer to third countries takes place.

The following is processed:

  • your IP address, truncated by two bytes — 203.0.113.42 becomes 203.0.0.0
  • date and time of the visit and the page requested
  • the previously visited page (referrer), where transmitted
  • browser used, its version, language and the operating system
  • approximate screen and window size
  • clicks on links leading away from this website and on the email address shown

No cookies are set in the process. Nothing is stored on your device and nothing is read from it, which is why no consent is required for this measurement. No recognition across multiple websites takes place — the analysis is confined to this website. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in aligning this website's content with how it is actually used.

The individual records collected are deleted after 30 days — the same period as for the server logs under section 3. Only aggregated totals are retained, such as the number of times a page was viewed in a given month. These no longer permit any reference to a person.

5.1 Objection

If your browser sends a Do Not Track or Global Privacy Control signal, no measurement takes place — the Matomo file is not even requested from the server. Independently of that, you can object to the measurement here at any time:

The objection is stored as a technical note in your browser's local storage — not as a cookie — and takes effect from the next page view. It is tied to this browser: if you clear your browser data or switch devices, you will need to declare it again. If JavaScript is disabled the checkbox cannot be operated — but in that case no measurement takes place anyway.

6. Getting in touch

6.1 Contact form

If you write to me using the form on this website, the details you enter are processed: name, email address, optionally the company name, and the content of your message. Technically, the time of submission and your IP address are also processed in order to prevent automated bulk submissions.

For the same purpose, your browser requests a short-lived technical token from this server as soon as you first fill in a field. It is tied to your browser identifier, is valid for at most two hours and for a single submission only. It is held solely in the memory of the open page – no cookie is set and nothing is stored on your device. The legal basis is Art. 6 (1) (f) GDPR, based on my legitimate interest in protecting the form against automated abuse.

The details are forwarded solely by email to my mailbox; they are not stored in a database on the web server. The legal basis is Art. 6 (1) (b) GDPR where your enquiry is directed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR based on my legitimate interest in responding to enquiries.

Providing your name, email address and message is necessary in order to process and answer your enquiry. All other details are voluntary.

6.2 Email and telephone

If you contact me directly by email or telephone, your details are processed in order to handle your request. The legal basis corresponds to that stated under 6.1.

6.3 Retention period

Your enquiry and the related correspondence are deleted once the matter has been conclusively dealt with and no statutory retention obligations apply. Commercial and tax retention periods of six or ten years apply to business correspondence (§ 257 HGB, § 147 AO).

7. Recipients of the data

Your data is disclosed solely to the hosting provider named under section 4 and to the provider of the email mailbox I use, in each case within the framework of a processing agreement. No further disclosure to third parties takes place, in particular not for advertising purposes.

8. Transfers to third countries

No transfer of personal data to countries outside the European Union or the European Economic Area is envisaged.

9. Your rights

You have the following rights in relation to me as the controller:

  • Access to the data processed about you (Art. 15 GDPR)
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR)
  • Erasure of your stored data (Art. 17 GDPR)
  • Restriction of processing where statutory obligations prevent erasure (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to info@sven-brunn.de is sufficient to exercise these rights. You can object to audience measurement directly under section 5.1, without writing to me.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. Encrypted transmission

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by the address bar of your browser starting with https://. When encryption is active, the data you transmit to me cannot readily be read by third parties.

11. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

12. Changes to this policy

I update this privacy policy whenever changes to the website or to the legal situation make it necessary. The version available here applies in each case.