Privacy policy

Last updated: 24 October 2026

1. Controller

Email: mail@simonhaering.com

2. Website hosting

This website is hosted by Site BV (Site.de), Operetteweg 7, 1323 VJ Almere, the Netherlands. When you visit, your browser transmits technical connection data, including your IP address, the time and target of the request, and browser information. These data are processed to deliver the website, diagnose errors and maintain operational security. Recipients are the hosting provider and the service providers it uses for technical delivery.

The legal basis is Article 6(1)(f) GDPR. The legitimate interests are to provide information about professional services and to operate a reliable and secure website. Connection data are technically necessary to deliver the website; without transmission, the website cannot be provided. According to the hosting provider, its hosting servers are located within the European Union.

Technical logs are retained only for as long as required to diagnose errors and maintain operational security. A specific security incident may require longer retention for investigation and preservation of evidence.

3. Cookies, analytics and external content

This website does not use cookies or browser storage for analytics or advertising. It does not load analytics tools, advertising networks, external fonts or embedded maps, videos or social media content.

4. Contact form and email

When you use the contact form, your name, email address and message are processed to handle your enquiry and forwarded to me by email. If you contact me directly by email, your email address, message and any other information you provide are processed. The form does not store messages in a website database. The email service is provided by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany.

For enquiries concerning a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR; the legitimate interest is responding to your message. Contacting me is voluntary. The form requires a name, email address and message to identify and answer the enquiry. Without these details, the form cannot be submitted.

Data are deleted when the enquiry has been fully resolved and further retention is no longer necessary for contract performance, statutory retention obligations or the establishment, exercise or defence of legal claims. Statutory retention is based on Article 6(1)(c) GDPR; necessary retention for legal claims is based on Article 6(1)(f) GDPR.

To protect the form from automated bulk submissions, an identifier is derived from your IP address using a secret-key hash; the IP address itself is not stored by this protection mechanism. The identifier and submission timestamps are used only to limit request frequency, without storing message content. Entries stop counting after ten minutes and are cleaned up on the next form submission attempt. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is preventing abuse.

5. Your rights

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw any consent at any time with effect for the future, without affecting the lawfulness of earlier processing.

Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). To exercise your rights, contact me at the address above.

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the alleged infringement.

6. Automated decisions

Use of this website does not involve automated decision-making, including profiling, within the meaning of Article 22 GDPR.