Privacy

Who is responsible

The controller for this personal website is:

Email: daniel.heinz@kit.edu

Further operator information is in the Impressum.

Hosting

GitHub Pages delivers this website. When you request a page or file, GitHub receives your IP address, the requested resource, the time of the request, and browser headers. These data allow the service to deliver the website and protect it against abuse.

The hosting provider is GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, United States. GitHub’s European entity is GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam, Netherlands. Data may be processed in the United States and other countries where GitHub and its service providers operate. GitHub describes its use of the EU–U.S. Data Privacy Framework and standard contractual clauses, as well as its retention criteria, in its privacy statement.

For my operation of this website, the legal basis is Article 6(1)(f) GDPR: my legitimate interest in making my academic work available through a reliable, secure website. GitHub determines the storage periods for its operational data according to the purposes and obligations described in its policy.

Visitor statistics

I use GoatCounter to see which pages people read and which links to papers or the CV they follow. GoatCounter.com is operated by Martin Tournoij in Ireland, with servers at Hetzner in Germany and Finland. The dashboard is accessible only to logged-in users.

The website sends a fixed page name or a predefined click label. Its analytics code uses no cookies or browser storage and sends no visitor URL query strings, fragments, referring URLs, or screen dimensions. Like any web request, a statistics request reaches GoatCounter with your IP address and browser headers.

Individual pageview records are disabled. GoatCounter stores aggregate counts, browser and operating-system categories, and approximate location. Session counting is enabled: according to GoatCounter, the site name, IP address, and User-Agent are held in memory for up to eight hours to distinguish repeat visits, rather than being stored as those values in its database. Aggregate statistics currently have no automatic deletion period and remain until I delete them or close the account. GoatCounter states that deleted data may remain in backups for up to 30 days. See its data-handling policy.

The legal basis is Article 6(1)(f) GDPR. My interest is to understand which research explanations and resources are useful, while limiting collection to this site’s use. I do not use the statistics for advertising or to track people across websites.

Your choices

You can object to analytics processing. The website honors Do Not Track and Global Privacy Control: no analytics request is sent when either is enabled in your browser. Blocking GoatCounter or disabling JavaScript also prevents counting and does not restrict access to the website. Local previews do not report visits.

You do not need to provide contact details to browse this site. Network data is necessary to deliver pages; analytics is optional. This website does not make automated decisions about you or perform profiling with legal or similarly significant effects.

Email and external links

If you email me, I use your address and message to respond. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in answering correspondence. Messages are kept as long as needed to handle the request and meet any applicable retention obligations. My KIT mailbox is also subject to KIT’s data protection information.

Fonts and images are served with this website. Links to publishers, professional profiles, and other websites load those services when you follow them; their operators then handle your data under their own policies.

Your rights

Under the GDPR, and subject to its conditions, you may request access, correction, deletion, or restriction of your personal data, and data portability where applicable. You may object to processing based on legitimate interests for reasons relating to your particular situation. Contact me at daniel.heinz@kit.edu.

I may be unable to associate aggregate statistics with an individual visitor. I do not collect additional identifying data solely to make that association.

You may lodge a complaint with a data protection supervisory authority, including the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.