1. Controller
The controller responsible for the processing of personal data on this website pursuant to the General Data Protection Regulation (GDPR) is:
Johann Ober
Koldingstraße 8
22769 Hamburg
Germany
2. Purpose
This website serves as a personal portfolio and professional presentation of my work, skills, qualifications, and experience. It may also serve as a professional application and communication platform. Personal data is processed in accordance with the GDPR and applicable German data protection law.
3. Hosting
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, technical data such as your IP address, date and time of access, requested pages, browser type, operating system, referring URL, and other technical information may be processed. This processing is necessary for the secure and reliable operation of the website and is based on Art. 6(1)(f) GDPR. STRATO states that visitor IP addresses are stored for a maximum of seven days for the purpose of detecting and preventing attacks. Where applicable, STRATO processes personal data on my behalf pursuant to Art. 28 GDPR.
4. Contact Form
This website uses Contact Form 7. If you contact me via the contact form, the information you provide, including your name, email address, message, and any other voluntarily provided information, will be processed solely to receive, handle, and respond to your inquiry. The legal basis is Art. 6(1)(f) GDPR. Where your inquiry concerns the initiation or performance of a contractual relationship, Art. 6(1)(b) GDPR may also apply. Your data will be retained only for as long as necessary to process your inquiry, unless statutory retention obligations or the establishment, exercise, or defence of legal claims require longer retention.
5. WordPress & Elementor
This website is operated using WordPress and Elementor. These systems and their necessary plugins may process technical data required for the functionality, security, maintenance, and operation of the website. Such processing is based on Art. 6(1)(f) GDPR, namely my legitimate interest in maintaining a secure, reliable, and functional website.
6. Cookies & Similar Technologies
This website may use technically necessary cookies or similar technologies required for its proper operation. Under Section 25 TDDDG, access to or storage of information on a user’s device generally requires consent unless a statutory exception applies, in particular where the technology is strictly necessary to provide a service expressly requested by the user. Technologies requiring consent will only be used after the legally required consent has been obtained.
7. Analytics & Tracking
This website does not currently use Google Analytics or other third-party analytics, advertising, or cross-site tracking services. No personal data is intentionally processed for behavioural advertising or cross-site tracking. If such technologies are introduced in the future, this Privacy Policy will be updated accordingly and, where required by law, prior consent will be obtained.
8. External Services & Content
No third-party services are intentionally embedded that transmit personal data to external providers, unless this is necessary for the functionality or security of the website. Where technically possible, external resources such as fonts are hosted locally to avoid unnecessary transmission of personal data to third parties. If additional third-party services are introduced, this Privacy Policy will be updated where required by law.
9. Data Security & Retention
Appropriate technical and organisational measures are used to protect personal data against loss, destruction, alteration, unauthorised disclosure, or unauthorised access. The website uses HTTPS/TLS encryption for data transmission. Personal data is retained only for as long as necessary for the respective purpose or as required by applicable statutory retention obligations.
10. Your Rights
Subject to the applicable legal requirements, you have the following rights under the GDPR:
Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object on grounds relating to your particular situation. You also have the right to lodge a complaint with a competent data protection supervisory authority. This Privacy Policy may be updated where necessary to reflect changes in legal requirements, technical developments, or the services used on this website.
Last updated: September 2026