Privacy notice

1. Controller

The controller within the meaning of Art. 4 No. 7 GDPR is the natural person named in the legal notice.

This notice covers rouvenjahnke.com. A separate application is reachable at the subdomain cloud.rouvenjahnke.com and is described in section 4.2 below; its internal processing lies outside the scope of this notice.

2. Data collected on access

When this website is accessed, the hosting provider processes technical access data in server-side log files:

• IP address of the requesting device
• date and time of the request
• requested URL and HTTP status code
• amount of data transferred
• user agent (browser, operating system, language)
• referrer URL, if transmitted by the browser

This website uses no analytics, tracking or profiling services. No cookies are set. There are no forms, and no server-side data storage beyond the log files described above. Contact is made exclusively via the email address given in the legal notice; in that case the content of the message is stored for the purpose of handling the enquiry.

For the dismissal of the informational notice shown at the bottom of each page, the browser stores a single localStorage entry (site-notice-dismissed). The value is a plain flag, contains no personal data, is never transmitted to any server, and can be removed at any time in the browser’s storage settings. The processing is covered by § 25(2) no. 2 TDDDG (strictly necessary for a function explicitly requested by the user when dismissing the notice).

3. Purpose and legal basis

The log data is processed for the reliable operation, stability and security of the website, in particular to defend against abusive access. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest follows from the purposes stated above. For email correspondence the legal basis is Art. 6(1)(b) or (f) GDPR.

4. Recipients and processors

4.1 Main website (rouvenjahnke.com)

The main website is hosted by Cloudflare, Inc. (www.cloudflare.com) on the Cloudflare Pages platform. Cloudflare processes the data described under section 2 as a processor within the meaning of Art. 28 GDPR on the basis of a corresponding data processing agreement.

4.2 Subdomain cloud.rouvenjahnke.com

4.2.1 Hosting

The subdomain cloud.rouvenjahnke.com runs on shared infrastructure provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (www.hetzner.com). Hetzner processes access and server data for that subdomain as a processor within the meaning of Art. 28 GDPR on the basis of a corresponding data processing agreement.

4.2.2 Nextcloud application

The subdomain hosts a private Nextcloud instance. The Nextcloud service is a separate application with its own processing context. Accessing it may set strictly necessary session cookies for authentication and CSRF protection; these cookies are set by the Nextcloud software itself and are described in the privacy information provided inside that application. No personal data is exchanged between rouvenjahnke.com and cloud.rouvenjahnke.com.

4.2.3 Event registration forms

The subdomain may host forms that allow you to register for, or book a place at, a specific event (for example events with catering or drinks). If you submit such a form, the following personal data is processed: your name and email address, whether you attend with a companion and, if so, the name of that companion, as well as any free-text remarks you choose to provide (such as allergies, dietary requirements or other information relevant to organising the event).

Form submissions are handled on the Hetzner infrastructure described in section 4.2.1 by a self-hosted workflow-automation tool (n8n). As part of the workflow, the form contents are forwarded as an email message so that the registration can be processed manually. The email is dispatched via the Gmail service operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (EU representative: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the course of delivering and storing the message, Google processes the sender and recipient addresses and the content of the email in accordance with its own privacy policy (policies.google.com/privacy). This applies only to email traffic originating from registration forms on the subdomain; rouvenjahnke.com does not send any automated email.

Legal basis. Processing of registration data is based on Art. 6(1)(b) GDPR (performance of the registration arrangement and pre-contractual steps at your request). Where you voluntarily disclose health-related information such as allergies or dietary requirements, that information constitutes a special category of personal data within the meaning of Art. 9(1) GDPR; its processing is based on your explicit consent under Art. 9(2)(a) GDPR, which you can withdraw at any time with effect for the future. Providing any of the requested data is voluntary; if it is not provided, the registration cannot be processed.

Companions. If you enter a companion’s name, you are responsible for informing that person about the processing described in this notice; the companion may exercise the rights listed in section 7 directly against the controller.

Retention. Registration data is kept only as long as is needed to organise and follow up on the respective event (for example to compile attendee, catering or drinks lists) and is deleted without undue delay after the event, unless a statutory retention obligation or the establishment or defence of legal claims requires longer storage.

No transfer of data to any further third parties takes place.

5. Transfers to third countries

To the extent that the hosting provider processes personal data in a third country outside the EU or EEA, this is carried out on the basis of an adequacy decision (Art. 45 GDPR) or appropriate safeguards, in particular the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR).

In addition, where emails are dispatched via Gmail as part of the event-registration flow described in section 4.2.3, the sender and recipient addresses and the content of the respective emails are transferred to Google LLC in the United States. The transfer is based on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795, Art. 45 GDPR), under which Google LLC is certified, and additionally on the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR).

6. Retention

Log data is retained for the usual period set by the hosting provider (typically a few days up to a few weeks) and is then deleted or anonymised to the extent that no personal reference remains. Email content is retained until the enquiry has been dealt with and, beyond that, only to the extent required by statutory retention obligations.

7. Your rights

You have the following rights vis-à-vis the controller at any time:

• access to the data processed about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)

An informal message to the email address given in the legal notice is sufficient to exercise these rights.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data-protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The locally competent authority for the controller is:

Last updated: April 2026.