Privacy Policy

The controller responsible for processing personal data on this website is:

Johann Christian GollanStiepeler Str. 131b44801 BochumDeutschland

• Email: dev@jcg.software

No data protection officer has been appointed, as the legal requirements for one are not met.

This site sets no cookies and loads no fonts or scripts from Google, so it needs no consent banner. Personal data only arises when you use the contact form or email me, and in the technical access logs of the hosting provider.

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered through its content delivery network. On every request Vercel processes technically necessary data: IP address, date and time, requested page, amount of data transferred, browser and operating system, and the previously visited page (referrer).

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in delivering the site securely and quickly and in defending against attacks. Vercel keeps access logs only for a short period and deletes them afterwards.

A data processing agreement under Art. 28 GDPR is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; in addition, the EU Commission's standard contractual clauses apply (Art. 46(2)(c) GDPR).

If you use the contact form, I process your name, your email address and the content of your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or, where your enquiry does not concern a contract, Art. 6(1)(f) GDPR (interest in answering enquiries).

The form sends your message as an email to my mailbox. For delivery I use Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes your email address and the message content for this purpose; a data processing agreement is in place with Resend, and the transfer to the USA is safeguarded by the EU Commission's standard contractual clauses. Your enquiry is not stored in a database of my own.

To protect against automated submissions, the form checks a field invisible to humans, the time taken to fill in the form, and the number of submissions per IP address within a few minutes. This check runs transiently in memory; nothing is stored permanently.

I keep your message in my mailbox until your enquiry has been dealt with and no follow-up questions are to be expected. If the enquiry leads to a contract, statutory retention periods under German commercial and tax law apply (up to ten years). The same applies to emails you send me directly.

To see how many people visit this site and which sections they look at, I use the open-source software Plausible Analytics. It runs on a server operated by me within the EU; no data is transmitted to Plausible or any other third party.

Plausible sets no cookies and does not access your device. Your IP address and browser identifier are only briefly combined with a random value that changes daily to produce a count that cannot be traced back to you and cannot be reconstructed the next day. Only aggregated figures are stored: page views, referrer, country, device type, browser.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is evaluating and improving the site. Since there is no access to your device, no consent under Section 25 TDDDG is required.

If you pause the motion of the header background, your browser remembers this setting in local storage under the key “jcg:hero-motion”. The entry only contains the value “paused” or “running”, is never transmitted to me or third parties, and is required for the function you chose (Section 25(2) no. 2 TDDDG). You can delete it at any time via your browser's site data settings.

The font used is served from my own server; visiting the site opens no connections to Google Fonts or other font providers. The site embeds no maps, videos or social media elements.

Under “Work” I link to websites I built for clients. Their own privacy policies apply to those sites.

With regard to personal data concerning you, you have the following rights against me:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An email to dev@jcg.software is sufficient to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

All data transferred between your browser and this site is encrypted using TLS (HTTPS). Access to my mailbox and the services used is protected by strong passwords and two-factor authentication.

I will update this policy when the services used or the legal situation change. Last updated: September 2026.