Privacy Policy

This policy explains the processing of personal data when you visit leanderh.com or contact the site owner by email. The site is a personal website and currently offers no visitor accounts, newsletter, public comments, ecommerce, or web contact form.

Some technical data is processed to deliver and secure the site. Optional audience measurement by Google Analytics is used only after you give affirmative consent in the Statistics category.

Leander Hirschmueller
Bessunger Str. 116
64285 Darmstadt
Germany

Email: hello@leanderh.com

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When a page is requested, the hosting infrastructure necessarily processes technical connection data such as the IP address, date and time, requested resource, response status, referring page, and browser or device information.

The processing is necessary to deliver the website, maintain availability, and detect misuse or security incidents. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are reliable, secure website operation and defense against attacks.

The current server configuration rotates access logs daily and retains seven rotations. Data needed to investigate a concrete security incident or to establish, exercise, or defend legal claims may be retained for the duration required for that purpose.

If you contact the published email address, the information you provide and technical message data are processed to handle and answer your request. Delivery is routed through the email-forwarding service of Porkbun LLC in the United States to a Gmail mailbox provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The private destination mailbox address is not published.

Depending on the subject, the legal basis is Article 6(1)(b) GDPR for steps connected with a possible contract, or Article 6(1)(f) GDPR for other correspondence. The legitimate interest is responding to genuine enquiries. Providing the data is voluntary, but without it the request may not be answerable. Messages are kept until the matter is resolved and then deleted unless statutory retention duties or the establishment, exercise, or defense of legal claims require longer storage.

Porkbun and Google may process data outside the European Economic Area. According to their current privacy information, transfers rely where applicable on an adequacy decision or appropriate safeguards, including standard contractual clauses. Details are available in Porkbun’s privacy policy and Google’s transfer-framework information.

The site uses EWWW Image Optimizer / ExactDN, operated by Exactly WWW LLC in the United States, to optimize and deliver images efficiently. Browser requests for image files are routed through the provider and its content-delivery network, so technical connection data is processed for delivery and security.

The provider states that Easy IO processes European images in Frankfurt, does not store visitor IP addresses in access logs, and anonymizes or randomizes IP information in application logs. Optimized files can remain distributed in the global network for up to one year unless purged earlier. Processing is based on Article 6(1)(f) GDPR; the legitimate interest is fast, reliable, bandwidth-efficient delivery. Where processing occurs outside the European Economic Area, the provider is required to use an applicable transfer safeguard.

Complianz and the WordPress Consent API provide the consent interface and record the choice on your device. Necessary storage is used to remember the selection and maintain the consent state. This processing supports compliance with consent obligations and is based on Article 6(1)(c) and Article 6(1)(f) GDPR. Storage or access that is strictly necessary to provide the requested consent functionality is permitted under § 25(2) TDDDG.

You may reject optional processing or later change or withdraw your choice using the persistent Manage consent control. Withdrawal does not affect the lawfulness of processing before withdrawal.

With your affirmative Statistics consent, this site uses Google Analytics 4 through Google Site Kit. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics processes pseudonymous usage information such as visited pages, interactions, approximate location, browser and device information, and identifiers stored on your device. Google receives the IP address when the request is made and states that Analytics does not log or store individual IP addresses.

The purpose is aggregated audience measurement and improvement of the website. The legal basis for storage or access on your device is § 25(1) TDDDG and for subsequent processing Article 6(1)(a) GDPR. No optional Analytics request is intended to occur before consent or after rejection or withdrawal.

Google may process data in the United States and other countries. Depending on the recipient and destination, transfers rely on an adequacy decision, including the EU–US Data Privacy Framework where applicable, or appropriate safeguards such as standard contractual clauses. The configured GA4 property retains event data for two months and user data for 14 months. Because reset on new user activity is enabled, the 14-month user-data expiry is refreshed when another event is received from that user. These controls do not limit the availability of standard aggregated reports. You can withdraw consent at any time through Manage consent.

To protect this website and its login against attacks, the site uses the Wordfence security plugin by Defiant, Inc., USA. Wordfence runs on this server and processes request data such as IP address, time, requested URL, browser information, and login attempts, for example to limit failed sign-ins and block attackers. Data about requests that appear to be attacks, including the IP address, may be transmitted to Defiant to improve threat protection. Signed-in users receive a technically necessary Wordfence cookie.

The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the secure operation of the website. Transfers to the US are based on the EU Standard Contractual Clauses.

The separate Cookie Policy lists the current storage technologies, purposes, providers, and durations detected for this site. It is synchronized with the consent-management configuration.

Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

The competent authority for the controller is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany. You may use its complaint service.

No automated decision-making producing legal or similarly significant effects is used on this website.

This policy reflects the website configuration reviewed on October 27, 2026. It will be updated when the processing activities or legal requirements materially change.