Privacy policy

What this site processes, and what it does not.

Controller

Gelhaus Solutions, proprietor Enno Gelhaus, Eichenwald 3, 49624 Löningen, Germany. Email: egelhaus@ennogelhaus.de

The short version

For visitors who are not signed in, this site sets no cookies, loads no external resources, and uses no analytics or tracking. No fonts from someone else's server, no embedded video, no tracking pixels, no ad networks. Opening a page contacts this server and nothing else.

That is a property of how the site is built rather than a statement of intent: pages are rendered to files in advance and served without a session. There is no consent banner because there is nothing to consent to.

Server log files

When a page is requested, the reverse proxy in front of this site and the web server itself record technical data: IP address, time of the request, the URL requested, the HTTP status code, the amount of data transferred, the referrer and the user agent.

The purpose is operating the service, diagnosing faults and defending against attacks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is keeping the service working and secure. This data is not combined with other sources and is not used to build profiles.

This site is informational. There is no registration here, no ordering process and no payment handling.

Getting in touch

Writing by email, using the channels listed, or using the form on the contact page transmits whatever that message contains: the name and address you give, the subject, the message itself and the time it arrived. It is processed in order to deal with the enquiry and to enter into or perform a contract (Art. 6(1)(b) or (f) GDPR) and kept for as long as that requires, or for as long as a statutory retention period applies.

A message sent through the form is stored on this server as well as being forwarded by email. The address it was sent from is stored with it, and the form counts how many messages one address sends in an hour, in order to detect and limit abuse of it (Art. 6(1)(f) GDPR). Stored messages are deleted after 180 days unless the enquiry is still open or a statutory retention period applies. Writing by email instead avoids the copy on this server altogether.

Vulnerability reports

Anyone reporting a vulnerability transmits whatever personal information they choose to include. It is processed in order to handle and coordinate the report and, where wanted and agreed, to credit the reporter in a published advisory. The legal basis is Art. 6(1)(f) GDPR.

Self-hosted applications

Applications from the GHub line that you run on your own infrastructure process data on your systems, under your control. We are not the controller for that processing and have no access to it. Where a hosted version on GPlatform is used, a separate agreement covers it.

Hosting and email

The site runs on our own infrastructure in Germany. There is no data processing agreement with an external hosting provider for delivering these pages.

Email is separate. The mailboxes for this domain are operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, and this server hands anything sent through the contact form to that provider for delivery. Anything written directly to the address above travels the same way.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and a right to object to processing based on legitimate interests (Art. 21 GDPR). An informal email to the address above is enough.

You also have the right to lodge a complaint with a supervisory authority. The competent authority here is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.