Privacy Policy

Last updated: March 1, 2026

1. Controller

The controller responsible for data processing on this website is:

Finn Freitag
In den Sandwiesen 14
35285 Gemünden, Germany
Email: contact@finnfreitag.com

2. Overview

This is a personal, non-commercial website. I take the protection of your personal data very seriously. This privacy policy explains what data is collected when you visit this website, how it is used, and what rights you have regarding your data under the General Data Protection Regulation (GDPR).

3. Hosting

This website is hosted by the following provider:

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin, Germany

When you visit this website, Strato may collect various log files including your IP address as part of their standard server operations. For more information, see Strato's privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6(1)(f) GDPR. I have a legitimate interest in ensuring a reliable presentation of my website.

4. General Data Collection (All Visitors)

When you visit any page on this website, the following data is automatically collected and stored for statistical purposes:

• Subdomain and page route – which page you visited
• Timestamp – when the visit occurred
• Referral source – how you found this website (e.g., search engine, social media link, direct visit), if available from URL parameters

This data is collected without any personal identifiers. No IP addresses, user agents, or cookies are stored for general page visits. The data is aggregated in batches and used solely to understand which pages are popular and how visitors discover the website.

Legal basis

Art. 6(1)(f) GDPR – legitimate interest in understanding website traffic and improving content.

5. Serial Number Tracking

Some physical products I produce contain a serial number that links to this website via a URL parameter (?sn=...). When you visit a page with a serial number, a privacy consent dialog is shown before any detailed data is collected.

• No detailed data is collected until you explicitly accept the privacy notice.
• If you decline, no detailed data about your visit is stored.
• If you accept, the following data is collected for that visit and future visits:

• Serial number and visited URL
• Timestamp of the visit
• User agent string – your browser's identification string
• Parsed browser information – browser name and version (e.g., "Firefox 147")
• Operating system – name and version (e.g., "Windows 10", "Android 16")
• Device information – device type, model, and vendor (e.g., "mobile", "iPhone", "Apple")
• Browser engine – name and version (e.g., "Gecko 147")
• CPU architecture – e.g., "amd64", "arm64"
• Bot detection – whether the request appears to come from an automated bot
• Preferred language – from the Accept-Language HTTP header
• Referer – the page you came from, if sent by your browser
• IP address
• Approximate geographic location – country, country code, ISP name, and ASN, derived from your IP address using my own geocoding service (coordifind.com, also operated by me on the same server, which does not store any data)

Additionally, on some page visits the consent dialog may appear even without a serial number link — this allows me to collect optional, anonymous usage statistics to improve the website experience. The same consent rules apply: no data is collected unless you explicitly accept.

Legal basis

Art. 6(1)(a) GDPR – your explicit consent given through the privacy consent dialog.

6. Cookies

If you accept the privacy consent dialog (section 5.2), a single cookie is stored on your device:

This cookie is a first-party cookie — it is set by this website only and is not shared with or accessible by any third party. It contains no personal information. The UUID is included in subsequent serial number tracking data to correlate visits from the same consenting user for statistical analysis.

If you do not interact with a serial number URL or if you decline the consent dialog, no cookies are set.

7. Purpose of Data Collection

All data collected on this website serves the following purposes:

• Traffic analysis – understanding which pages are popular and which receive less traffic
• Content improvement – identifying which content performs well and where improvements are needed
• Browser optimization – knowing which browsers and devices visitors use so I can ensure compatibility
• Language priorities – determining which language translations may be needed based on visitor languages and locations
• Product insights – understanding the geographic and demographic reach of physical products that include serial numbers
• Referral analysis – understanding how visitors discover this website

This is a personal website and the data is used exclusively by me for the purposes listed above.

8. Data Sharing

Your data is not shared with any third parties. No analytics services, advertising networks, or other external services receive any of your data.

The website is hosted on a VPS provided by Strato AG (see section 3). The geocoding service at coordifind.com is operated by me and runs on the same server. It is used solely to determine your approximate country from your IP address and does not store any data.

9. Data Storage and Retention

Collected data is stored on my VPS hosted by Strato (see section 3) in JSON files. The data is retained indefinitely for long-term statistical analysis unless you request its deletion.

10. Your Rights Under the GDPR

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR) – You can request information about what data is stored about you.
• Right to rectification (Art. 16 GDPR) – You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) – You can request deletion of your data.
• Right to restriction of processing (Art. 18 GDPR) – You can request that processing of your data be restricted.
• Right to data portability (Art. 20 GDPR) – You can request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) – You can object to data processing based on legitimate interest at any time.
• Right to withdraw consent (Art. 7(3) GDPR) – If you gave consent (e.g., by accepting the privacy notice), you can withdraw it at any time by deleting the sn_consent cookie from your browser. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact me at contact@finnfreitag.com. Please include your cookie identifier (shown below) in your email so I can locate your data.

11. Right to Lodge a Complaint

If you believe that your data is being processed unlawfully, I encourage you to contact me first at contact@finnfreitag.com so we can resolve the matter directly.

You also have the right to lodge a complaint with a data protection supervisory authority at any time. The competent authority is the Hessische Beauftragte für Datenschutz und Informationsfreiheit (datenschutz.hessen.de).

12. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in data processing practices or legal requirements. The date of the last update is shown at the top of this page.