Privacy

Controller

Andreas Binder, address see imprint. Email: a.binder@1-pm.net

Principle

This is a static website. No cookies are set, no profiles are created and no data is passed to third parties for advertising purposes.

Server log files

The host automatically collects and stores information transmitted by your browser in server log files: browser type and version, operating system, referrer URL, time of request and IP address. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in the technically sound operation of the website. This data is not merged with other sources. Host: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

Contact by email

If you write to me by email, your details are stored for the purpose of handling the enquiry. The legal basis is Art. 6(1)(f) GDPR. The data is deleted once it is no longer required for that purpose.

The newsletter is sent using Brevo. The provider and my contracting party is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, registered at the Amtsgericht Charlottenburg under HRB 133191. Brevo processes the data solely on my behalf and on my instructions, under a data processing agreement pursuant to Art. 28 GDPR, which forms part of Brevo's terms of use.

Data is stored in data centres within the European Union (France, Germany, Belgium). Brevo engages sub-processors from which access from third countries is possible — in particular for customer service and maintenance from the United States and India, and for delivery and network security. Those transfers are covered either by an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or by standard contractual clauses under Art. 46(2)(c) GDPR.

Subscription uses double opt-in: after entering your address you receive an email containing a confirmation link, and only following that click does the subscription take effect. Stored are your email address plus the time and IP address of subscription and confirmation, the latter serving as evidence of consent. The legal basis is your consent under Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future via the unsubscribe link in every email or by an informal message to a.binder@1-pm.net. Evidence of consent is retained for up to three years after the subscription ends, on the basis of Art. 6(1)(f) GDPR, in order to meet the accountability obligation under Art. 5(2) GDPR.

Tracking pixel and link redirection

I am describing this in more detail than is customary, because the usual wording tends to obscure what actually takes place.

Every newsletter email contains a one-pixel image that is invisible to you. If your email client loads external images when opening the message, this image is retrieved from a server at r.mail.1-pm.net. That address is a subdomain of this website but technically points to Brevo's systems. During this retrieval your IP address, your email client identifier and the time are transmitted to Brevo.

All links in the newsletter — except mailto addresses — do not point directly to their destination but route through r.mail.1-pm.net. With every click, your IP address, browser identifier, the time and the destination address are therefore transmitted to Brevo before you are forwarded. This includes the link to this privacy policy and the unsubscribe link.

This transmission cannot be switched off on my service provider's plan. Brevo embeds the tracking pixel and link redirection in every email it sends, regardless of whether consent to evaluation has been given. I have verified this and raised it with the provider.

What I can control is the evaluation. My account is configured so that opens and clicks are only evaluated and attributed to a recipient where that recipient has explicitly consented. Without your consent no evaluation, no attribution to you personally and no profiling takes place; the default setting for new recipients is "no evaluation". Where you do consent, the legal basis for such evaluation is Art. 6(1)(a) GDPR, and you may withdraw that consent at any time without unsubscribing.

If you configure your email client not to load external images automatically, the tracking pixel is never retrieved. Practically every email client offers this setting, and it protects you with other senders too. Link redirection cannot be bypassed on your side, but you can inspect the destination address in your client's preview and open it directly.

I intend to move newsletter delivery to self-operated infrastructure in the medium term and to drop tracking pixels and link redirection entirely. This privacy policy will be updated at that point.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.

TLS encryption

This site uses TLS encryption for security reasons.

This is a courtesy translation. The German version at/de/datenschutz is the authoritative one.