Privacy Policy
This policy explains which personal data is processed when you visit
patwoz.dev / patwoz.de, on what legal basis,
and which rights you have as a data subject.
The legally binding version is the German version. This English version is provided for convenience.
Controller
Patrick Wozniak
c/o piparo.tech GmbH
Frauentorgraben 61
90443 Nürnberg
Germany
Email: [email protected]
piparo.tech GmbH does not operate this website. The address is used as a forwarding address only.
Hosting
The website is served via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the site is accessed, technically necessary access data is processed, in particular IP address, date and time, requested URL, referrer, browser and device information, and technical status information. This processing is required in order to deliver the website, ensure security and stability, and to prevent misuse. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is the reliable delivery of the website.
Cloudflare, Inc. is based in the USA; accessing the website therefore involves a transfer to a third country. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). Cloudflare, Inc. is certified under the DPF; the certification status can be checked at www.dataprivacyframework.gov.
Plausible Analytics
This website uses a self-hosted instance of Plausible Analytics for
privacy-friendly, aggregated audience measurement. The script is served
from the subdomain a.patwoz.dev. Plausible does not use
cookies and does not build personal user profiles. Aggregate technical
usage data is processed (page views, referrer, browser, operating
system, device type, country/region, visit timestamp). A short-lived
daily hash is derived from IP address and user agent for session
detection only and is discarded within 24 hours.
Legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is the statistical evaluation of usage, error analysis, and improvement of the website. The underlying Plausible instance is operated within the EU.
Cloudflare Web Analytics
The website also uses Cloudflare Web Analytics ("Cloudflare Insights") operated by Cloudflare, Inc. for cookieless audience measurement. Only aggregated performance and usage data is collected (e.g. page views, load times, browser and device type). According to Cloudflare, no identifying cookies are set and no persistent user profiles are created.
Legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in measuring technical performance and analysing usage. With regard to the third-country transfer, the statements made above under "Hosting" apply accordingly (EU-US Data Privacy Framework).
Local browser storage
The website stores the following values locally in your browser for convenience functions (no cookie, no transmission to the operator):
theme– the selected appearance (light/dark).-
visited– session storage; suppresses entrance animations on repeated visits within a session. -
lang-hint-dismissed– records that the language hint has already been dismissed.
Storage is strictly necessary for the functions requested by the user within the meaning of § 25 (2) no. 2 TDDDG. You can delete these entries at any time via your browser settings.
Contact form and email contact
You can send a project inquiry through the contact form or contact me directly at [email protected]. The form processes the information you enter, including name, email address, inquiry category and project description, plus any optional company, timing, collaboration, budget and project-link details. Cloudflare Turnstile also processes technical request and verification data to protect the form against automated misuse.
Form submissions are handled by a narrowly scoped Cloudflare Worker. The
Worker validates the request and Turnstile token, applies a practical
rate limit using a short-lived, hashed IP-derived key that is not logged
or stored by the application, and uses Cloudflare Email Service to send
a plain-text message to [email protected]. The visitor email is
used only as the message's Reply-To address. The Worker does not store
submissions in a database and application logs are designed not to
contain submitted form values, raw bodies, Turnstile tokens or full IP
addresses. Cloudflare and the receiving mail systems may nevertheless
process operational metadata under their respective retention rules.
Legal basis is Art. 6 (1) (b) GDPR for contract-related requests and Art. 6 (1) (f) GDPR otherwise (interest in answering inquiries and preventing misuse). Correspondence received by email is kept for as long as necessary to handle and document the request and is then deleted, unless statutory retention obligations apply. The application itself adds no persistent submission storage.
This description documents the intended technical processing and is not legal advice. The wording, legal bases, processor agreements, international-transfer safeguards and actual provider retention periods should be reviewed before production activation.
Embedded fonts and logos
Fonts are served locally from the same server that delivers the website; no connection to external font providers (e.g. Google Fonts) is established. Logos in the "Work" section are embedded locally.
External links
This website contains links to external services (e.g. GitHub, Plausible, OpenStreetMap-based projects). Data is only transmitted to the respective provider once you actively click on a link. The privacy policies of the respective provider then apply.
Forwarding address
Via the forwarding address, piparo.tech GmbH may receive incoming mail for Patrick Wozniak and forward it. Sender data, cover letters, delivery data and contents of the consignment may be processed to the extent necessary for acceptance and forwarding.
Your rights
Pursuant to the GDPR you have, in particular, the rights to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7 (3) GDPR). An informal email to [email protected] is sufficient.
Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for the controller is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de
Changes to this privacy policy
This privacy policy may be adjusted when technology, services used or legal requirements change. The version published on this page applies.