Privacy Policy

Last updated: 4 October 2026

This is a translation. In case of discrepancies, the German version (“Datenschutzerklärung”) prevails.

1. Controller

Jonathan Auch
Studio Jonathan Auch
Prinzessinnenstr. 16
10969 Berlin
Germany

Email: mail@jonathan-auch.de
Contact form: https://jonathan-auch.de/contact/

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview

We process personal data only as far as necessary to run this website, answer enquiries and prepare or carry out projects. This website sets no cookies for visitors, embeds no third-party content or scripts and uses no advertising services.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. The data generated when the website is accessed (see server log files) is processed on Hetzner’s servers.

Legal basis: our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

4. Server log files

When you visit the website, the web server automatically records information transmitted by your browser: IP address, date and time of access, page requested, referrer URL, amount of data transferred, status code, browser type and operating system.

IP addresses are stored only in shortened form: for IPv4 the last octet is replaced with a random value, for IPv6 the last 88 bits are anonymised. This means individual persons cannot be identified.

This data is technically necessary to deliver the website and keep it secure (e.g. to fend off attacks). Legal basis: Art. 6(1)(f) GDPR. Log files are deleted automatically after 7 days.

In addition, WordPress logs requests for pages that do not exist and redirects (requested address, referrer URL, browser identifier, time) so that we can fix broken links. IP addresses are not stored; these entries are deleted after 7 days.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

6. Analytics with Independent Analytics

We use the WordPress plugin “Independent Analytics” for usage statistics. All analysis runs on our own server at Hetzner; no data is passed to third parties. The plugin uses no cookies and stores nothing on your device. IP addresses are not stored. To count unique visits, a hash is formed from IP address and browser identifier using a key (salt) that is renewed daily, so visitors cannot be recognised across days. Statistics are deleted automatically after two years.

Data collected includes pages viewed, time on page, referrer, approximate location (country/city), device type, browser and operating system. We use it to improve the website.

Legal basis: our legitimate interest in privacy-friendly analysis of how our website is used (Art. 6(1)(f) GDPR). As no information is stored on or read from your device, no consent under Section 25 TDDDG is required.

7. Cookies

This website sets no cookies for visitors, so no cookie banner is needed.

On the projects overview you can switch between grid and list view. To keep your choice for your next visit, it is saved in your browser’s local storage (“grid” or “list”). This contains no personal data, is not transmitted to us or anyone else, and remains until you clear it in your browser. Storing it is strictly necessary for the function you explicitly requested (Section 25(2) no. 2 TDDDG).

Only when editors log in to the WordPress admin area are technically necessary login cookies set (Section 25(2) no. 2 TDDDG).

8. Fonts

The fonts used on this website are loaded locally from our own server. No connection to Google or other third-party servers is made.

9. Contact by email and contact form

If you contact us by email or via the contact form, we process the data you provide (e.g. name, email address, company, website, project details, budget range, timeline, message and how you heard about us) to handle your enquiry and any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps; otherwise our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR).

Form submissions are sent to us by email via our mail server at Hetzner and are not stored in the website database. To prevent spam, we keep a hash of your IP address for one hour to limit the number of messages per hour (Art. 6(1)(f) GDPR); it is then deleted automatically. We delete your enquiry once it has been fully dealt with and no project results from it, at the latest after 12 months. Statutory retention obligations (e.g. 6 or 10 years under German commercial and tax law) remain unaffected.

10. Booking appointments via Cal.com

To book an intro call, we link to Cal.com, a service of Cal.com, Inc., USA. Cal.com is not embedded on our website; only when you click the link are you taken to Cal.com’s website, where the data you enter (e.g. name, email address, chosen time, project details) and technical data (e.g. IP address) are processed by Cal.com.

We receive your booking details to prepare and hold the call. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps).

Cal.com is based in the USA, so your data may be transferred to the USA. Using the booking service is voluntary; you can always reach us by email or via the contact form instead.

More information: Cal.com’s privacy policy, https://cal.com/privacy

11. Links to social networks

We link to our profiles on Instagram, LinkedIn and Are.na. These are plain links; no plugins or content from these services are embedded. Only when you click a link are you taken to the provider’s site, where its privacy policy applies.

12. Your rights

Within the limits of the law, you have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR),
  • have incorrect data corrected (Art. 16 GDPR),
  • have your data erased (Art. 17 GDPR),
  • restrict processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw consent with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.

To exercise your rights, simply email mail@jonathan-auch.de.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de

14. Changes

We update this privacy policy when the website or legal requirements change. The version published here applies.