Skip to content

Privacy

Controller

Max Bülte
Einigkeitstr. 29
45133 Essen
Germany

Email: hello@tsunaro.io

For confidential inquiries, see the contact details and encryption keys . Further provider information is available in the imprint .

Delivering this website

This website is self-hosted. Web hosting and email, including their backups, are operated within the European Union or European Economic Area (EEA).

When you request a page, the server infrastructure processes the connection data needed to deliver it. This includes your IP address, the requested path and the HTTP headers sent by your browser. The server needs your IP address to return the requested content to your browser.

We do not keep persistent access logs, including on upstream proxies. Connection data is processed to handle the request, not retained as a persistent access log. The usage statistics described below are separate from these access logs.

The lawful basis is Article 6(1)(f) GDPR. Our legitimate interest is providing a technically reliable and secure website.

Usage statistics with Umami

We use a self-hosted instance of Umami in Germany or the EU. It is accessed through this website’s /stats path. No analytics data is sent to the Umami Cloud service or advertising networks. There is no advertising or cross-site tracking.

The statistics show which pages are used and which browsers and device types visitors use. They help us improve the content, navigation and technical presentation of this website.

Data processed

Umami processes the following data in particular:

  • Page addresses, including transmitted URL parameters, page titles and the time of each visit.
  • The referring page, where your browser supplies it.
  • Browser, operating system, device type, screen size and language.
  • Approximate location, such as the country, where IP-based geolocation is enabled on the server.
  • Time-limited identifiers that group page views into visits.

Umami does not set tracking cookies. It uses the IP address when processing a request but does not store it as an IP address in the statistics. Umami derives session identifiers from data including the IP address, browser identification and website ID. These identifiers are not linked to real names. This does not, by itself, mean that all statistical records are anonymous.

We do not use custom user identifiers (Distinct IDs), combine statistics with email inquiries or create personal advertising profiles across visits.

Lawful basis and retention

We rely on Article 6(1)(f) GDPR for usage statistics. Our legitimate interest is improving this website to meet visitors’ needs. Processing is limited through self-hosting, the absence of tracking cookies and custom user identifiers, and no sharing with advertising or analytics services.

Usage statistics are retained for 90 days. Older data is automatically deleted.

Email inquiries

This website has no contact forms. If you email us, we process your sender address, message, attachments and technical delivery information to handle your inquiry.

Article 6(1)(b) GDPR applies to processing necessary for a contract with you or steps taken at your request before entering a contract. Other correspondence is processed under Article 6(1)(f) GDPR; our legitimate interest is responding appropriately to your inquiry.

Inquiries are retained for as long as needed to handle them and any necessary follow-up. Where statutory retention duties apply, the lawful basis is Article 6(1)(c) GDPR. The retention period then follows the relevant duty, particularly section 147 AO for tax-relevant records. Not every email is subject to such a duty. Any further retention necessary to establish, exercise or defend legal claims follows the applicable limitation periods and Article 6(1)(f) GDPR.

Providing data by email is voluntary. Without a reachable sender address and the information needed to handle your inquiry, we may be unable to respond.

Recipients and processing locations

The controller has access to the data. Where infrastructure or data-centre providers support the self-hosted services, their role is limited to technical provision. Where required, processing on our behalf is governed by Article 28 GDPR. Authorities or other authorised recipients receive data only where there is a legal obligation or another lawful basis.

No transfer of personal data outside the EU or EEA is planned for the self-hosted services described here. Email delivery may additionally involve services used by you or your email provider.

External links

Links to source code, the personal blog or other websites do not load content from those operators merely because you read this page. Following a link opens the other website, where that operator’s privacy notice applies.

Your rights

Subject to the applicable legal conditions, you have the right to:

  • Access your personal data (Article 15 GDPR).
  • Rectify inaccurate or incomplete data (Article 16 GDPR).
  • Request erasure of your data (Article 17 GDPR).
  • Request restriction of processing (Article 18 GDPR).
  • Receive your data through data portability, where the legal requirements apply (Article 20 GDPR).

Right to object under Article 21 GDPR

Where processing relies on Article 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or need the processing for legal claims.

Send requests to hello@tsunaro.io . We may request additional information if there are reasonable doubts about your identity. If we cannot link statistical records to you, we do not have to collect additional data solely to identify you (Article 11 GDPR). You may provide additional information that enables us to identify the relevant data.

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects under Article 22 GDPR.

Complaints

Under Article 77 GDPR, you can complain to a data protection supervisory authority, particularly where you live, work or believe an infringement has occurred. You do not have to contact us first.

The supervisory authority responsible for the controller is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de
Contact details and complaints