1. Data protection at a glance
In the following I inform you pursuant to Art. 13 GDPR which personal data are processed when you visit this website, for what purpose and on what legal basis this happens, and what rights you have.
In short: this website does not include a contact form, a comment function or social media plugins. To analyse traffic I use Google Analytics, integrated via Google Tag Manager. The analytics service is only loaded after you have given your explicit consent; without your consent no cookies are set and no usage data is transmitted. You can withdraw your consent at any time. No data is processed for advertising purposes.
2. Controller
The controller within the meaning of Art. 4 (7) GDPR is:
Alexander Senning
Furtbachstraße 10a
70178 Stuttgart
Germany
Email: mail@alexandersenning.com
No data protection officer has been appointed, as the statutory requirements for this are not met.
3. Hosting and server log files
This website is hosted by WordPress.com. The provider is Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, D02 AY86, Ireland, which draws on systems of its parent company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. The provider processes the data as a processor on the basis of a contract pursuant to Art. 28 GDPR.
When the website is called up, data are automatically recorded in server log files:
- IP address of the requesting device
- Date and time of access
- Name and URL of the page retrieved
- Referrer URL
- Browser type and version as well as operating system
- Volume of data transferred and status message
This processing is technically necessary in order to deliver the website, to ensure its stability and security and to prevent misuse. The legal basis is Art. 6 (1) (f) GDPR. The log data are stored for a limited period only and are subsequently deleted or anonymised; they are not merged with other data sources.
4. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the prefix “https://” in your browser’s address bar. While encryption is active, the data you transmit to this website cannot readily be read by third parties.
5. Cookies
Cookies are small text files that your browser stores on your device. I use technically necessary cookies to deliver the website, ensure its security, store your choice in the consent banner and provide the administration area for logged-in users. The legal basis is Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.
Cookies used for audience measurement by Google Analytics are only set after you have consented to the Statistics category. The legal basis is Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. Details can be found under point 8. No cookies are set for advertising or profiling purposes.
You can restrict or prevent the storage of cookies in your browser settings at any time and delete cookies that have already been stored. Independently of this, you can adjust or withdraw your consent at any time via the cookie policy of this website.
6. Consent management
To obtain, manage and document your consent I use the Complianz tool. It runs on this website’s server; your choice is not transmitted to third parties.
Complianz stores your decision as well as the time and scope of the consent given in cookies with the prefix cmplz_. This storage is necessary so that the notice is not shown to you again on every visit and so that I can demonstrate consent in accordance with Art. 7 (1) GDPR. The legal basis is Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (c) GDPR.
As long as you have not made a choice, no services requiring consent are loaded. You can change or withdraw your choice at any time with effect for the future via the cookie policy of this website.
7. Audience measurement with Jetpack Stats
For the statistical evaluation of visits I use Jetpack Stats, a service of the Automattic companies named under point 3. The data recorded include the pages called up, the referrer, the approximate region of origin as well as browser and device type. The IP address is used in truncated or pseudonymised form only. No cross-site user profiles are created and the data are not used for advertising purposes.
The purpose is to evaluate which content is in demand in order to shape the offering accordingly. The legal basis is my legitimate interest pursuant to Art. 6 (1) (f) GDPR. You may object to this processing at any time pursuant to Art. 21 GDPR.
8. Google Tag Manager and Google Analytics
To evaluate traffic statistically I use Google Analytics 4, integrated via Google Tag Manager. The provider of both services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data as a processor on the basis of an agreement pursuant to Art. 28 GDPR.
The Google Tag Manager container is loaded as soon as the website is opened. For technical reasons your IP address is transmitted to Google in the process. Tag Manager itself does not collect usage data, does not set cookies and does not analyse your behaviour; it only controls which services are loaded. The legal basis is Art. 6 (1) (f) GDPR, based on my legitimate interest in managing the services used consistently and securely.
Google Analytics itself is only loaded after you have consented to the Statistics category. Without your consent no cookies are set and no usage data is transmitted to Google Analytics.
Once consent has been given, the pages visited, the time spent, the source of the visit, the approximate region and details of the browser, operating system and device type are recorded, among other things. To recognise your browser, Google Analytics sets cookies whose names begin with _ga; their lifetime is up to two years. Google truncates the IP address and does not store it permanently.
The Google signals feature is disabled, so your data is not combined across devices with Google accounts. Sharing the collected data with Google for its own purposes is likewise switched off. The data is not used for advertising or to build advertising profiles. Recorded event and user data is deleted automatically after fourteen months.
The purpose of the processing is to evaluate which content is in demand in order to develop the site in line with actual needs. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You can withdraw this consent at any time with effect for the future; the lawfulness of the processing carried out until then remains unaffected.
Further information on how Google handles user data can be found in Google’s privacy policy at policies.google.com/privacy.
9. Delivery of content and fonts
Images, scripts and stylesheets of this website are delivered in part via the hosting provider’s content delivery network. For technical reasons your IP address is transmitted to the servers involved so that the content can be sent to your browser. The legal basis is Art. 6 (1) (f) GDPR, based on an interest in fast and secure delivery.
The fonts used are embedded locally and delivered from this website’s server. No connection to Google Fonts or other external font providers takes place.
10. No comment, form or newsletter function
This website contains no contact form, no comment function and no newsletter sign-up. No contact or customer data are therefore collected via the website itself. For this reason the anti-spam service Akismet (Automattic) present on the system receives no user data, and no avatar images are loaded via Gravatar.
Should one of these functions be activated in future, this privacy statement will be supplemented accordingly beforehand.
11. Contact by email
If you write me an email, I process the details you provide — name, email address and the content of your message — solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (f) GDPR, based on an interest in answering enquiries; where the matter concerns the initiation or performance of a contractual or employment relationship, Art. 6 (1) (b) GDPR applies in addition.
Your message is deleted as soon as it is no longer required to achieve that purpose and no statutory retention obligations stand in the way.
12. Links to LinkedIn and Xing
This website refers to my profiles on LinkedIn and Xing. These are plain text links, not social media plugins. Merely calling up this website therefore transmits no data to the networks named.
Only when you click one of these links is a connection established to the servers of the respective provider. Responsibility then lies with LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, and New Work SE, Am Strandkai 1, 20457 Hamburg, respectively. I have no influence over their processing.
13. Transfers to third countries
In the context of hosting, audience measurement and web analytics, personal data may be transferred to Automattic Inc. and to Google LLC in the USA. The transfer is based on the European Commission’s standard contractual clauses pursuant to Art. 46 (2) (c) GDPR together with supplementary safeguards and, where the recipient is certified under the EU-U.S. Data Privacy Framework, additionally on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. Google LLC is certified under that framework.
I point out that access by state authorities to personal data in the USA cannot be entirely ruled out and that you may have no effective legal remedies against it.
14. Storage period
Personal data are stored only for as long as is necessary for the purposes named in each case or as statutory retention periods require. Thereafter the data are deleted or anonymised.
15. Your rights
You have the following rights vis-à-vis me:
- Access to the data processed about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)
An informal message to mail@alexandersenning.com is sufficient to exercise them.
16. Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (f) GDPR. I will then no longer process the data concerned unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
17. Right to lodge a complaint with a supervisory authority
Without prejudice to other legal remedies, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. The authority responsible for me is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
18. No automated decision-making
Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place. The provision of personal data is neither required by law nor by contract; all that is necessary is the technically required processing of access data, without which the website cannot be delivered.
19. Status and changes
This statement is dated August 2026. Further development of the website or changed legal requirements may make an adjustment necessary. You will always find the current version on this page.
