Privacy policy
Last updated: 2026-10-20. This English version is provided for convenience; the German Datenschutzerklärung is legally binding.
1. Controller
Kjell Otto, Lornsenstr. 34, 22767 Hamburg, Germany
Email: kontakt [at] kjell-otto [dot] de, phone: Contact
2. Principles
This website sets no tracking or marketing cookies and uses no advertising or social media plugins. Only data required to run the website and answer your enquiries is processed.
3. Hosting and delivery (Cloudflare)
The website is delivered via Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data such as IP address, date and time, requested page, browser and system information (server logs) to deliver the site securely and efficiently and to fend off attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). A data processing agreement is in place. Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.
4. Analytics (Cloudflare Web Analytics)
For anonymous reach measurement I use Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and builds no user profiles; only aggregated metrics such as page views, referrers and load times are collected. Legal basis: Art. 6(1)(f) GDPR.
5. Contact form, email and phone
If you contact me via the form, email or phone, I process your details (name, email address, optionally company, topic and message) solely to handle your enquiry. Form submissions are delivered to me as email via the sending service Resend (Resend, Inc., USA; sent from servers in the EU) and are not stored in a database by me. A data processing agreement including EU standard contractual clauses is in place; Resend keeps sending data only for a limited time for delivery and abuse prevention. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in replying). I delete your enquiry once it has been dealt with, unless statutory retention obligations apply.
6. Spam protection (Cloudflare Turnstile)
To protect the contact form from automated abuse I use Cloudflare Turnstile, which transmits technical browser characteristics and your IP address to Cloudflare to check whether a request comes from a human. Turnstile only loads when you scroll to the form. Legal basis: Art. 6(1)(f) GDPR.
7. Local browser settings
If you choose a colour scheme or language, your browser stores that choice locally (localStorage). This data never leaves your device (§ 25(2) no. 2 TDDDG).
8. External links
Links to external services (e.g. LinkedIn) are plain links. Only when you follow them do the respective provider's privacy terms apply.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time and lodge a complaint with a data protection supervisory authority.