Privacy policy
Controller
Controller for the personal data collected on this site:
Marco Antonio Salas DíazErlangen, Germany
[email protected]
Hosting and server logs
This site is hosted on servers operated by an external provider (Namecheap). When a page is requested, the server automatically records technical data: IP address, date and time, the page requested, browser and operating system. These logs are necessary to deliver the service securely and reliably (legal basis: Art. 6(1)(f) GDPR, legitimate interest) and are not used to identify individual visitors.
Content delivery network (Cloudflare)
This site is delivered through Cloudflare's content delivery network (provider: Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany; parent company: Cloudflare, Inc., USA). Cloudflare sits in front of the hosting server: every request passes through Cloudflare first, which processes technical data such as your IP address, the page requested, your browser and operating system. This serves to deliver the site quickly and securely and to protect it against attacks (legal basis: Art. 6(1)(f) GDPR, legitimate interest). Data may be transferred to the United States in the process; Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses apply in addition.
SSL/TLS encryption
This site is served exclusively over HTTPS with SSL/TLS encryption, so the data you exchange with the server cannot be read by third parties in transit. The encryption is terminated by Cloudflare as an upstream provider (see above). You can recognise the encryption by the "https://" prefix and the padlock in your browser's address bar.
Cookies
This site stores one first-party technical cookie ("ms-lang") that remembers your chosen language for one year. As it is strictly necessary to provide the service you requested, storing it relies on § 25(2)(2) TDDDG and needs no consent. Any other storage on your device happens only with your prior consent, under § 25(1) TDDDG and Art. 6(1)(a) GDPR.
Consent management (Cookiebot)
Cookiebot, provided by Usercentrics A/S (Denmark), is used to collect and document consent. Cookiebot stores a consent key together with an anonymised IP address in order to evidence your choice. You can change or withdraw your consent at any time via the link in the cookie banner.
Google Analytics 4
With your explicit consent, Google Analytics 4 (Google Ireland Limited) is used to measure site usage in aggregate. Google's script is not loaded at all until that consent has been given. Legal basis: Art. 6(1)(a) GDPR. In the course of this, data may be transferred to Google servers in the United States, covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. You may withdraw your consent at any time with effect for the future.
Fonts
Fonts are served from this server. No connection to Google servers is made in order to display text, so your IP address is not transmitted to third parties for that purpose.
Contact by email and WhatsApp
If you write to me by email, your data is processed solely to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The WhatsApp and LinkedIn links are plain links: a connection to WhatsApp Ireland Ltd. or LinkedIn Ireland Unlimited Company servers is only established if you choose to follow them, and that service's own privacy policy applies from that point. This site embeds no social media content and loads none of their scripts.
Storage periods
Data is kept only for as long as it remains necessary for its purpose, unless a legal obligation requires longer retention. Specifically: the language cookie ("ms-lang") expires after one year; the consent record is kept for as long as it is needed to evidence that consent; Google Analytics data is deleted after the retention period configured on the property; and server logs are deleted once they are no longer needed to operate and secure the site.
Your rights
You have the right to access, rectification, erasure, restriction of processing, objection and data portability (Art. 15-21 GDPR). You may also lodge a complaint with the competent supervisory authority; for Erlangen (Bavaria) that is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) in Ansbach. To exercise these rights, simply write to the email address given above.
Withdrawing consent
Where processing is based on your consent, you may withdraw it at any time with effect for the future; the lawfulness of processing carried out before the withdrawal is unaffected. For cookies and analytics it is enough to reopen the cookie banner and change your choice.
Are you required to provide data?
No. This site has no forms, no registration and no contracts: you can read all of it without providing anything. The only data processed is the technical data your browser sends when loading the page, plus whatever you choose to include if you write to me of your own accord.
Automated decisions and profiling
No automated individual decision-making or profiling within the meaning of Article 22 GDPR takes place. Analytics, where you have allowed it, produces only aggregate statistics and does not evaluate individual people.
Image credits
The main photograph on the landing page is an AI-generated image: only the face comes from a real photograph. It is labelled as such on the page itself, in line with Article 50 of the European AI Act.
Changes to this policy
This policy may be updated to reflect changes to the site or to applicable law. The date of the last update is shown at the end of this page.
Last updated: 2026-08-11