Privacy Policy

This site is a static blog. It sets no cookies, runs no analytics and loads nothing from third-party servers — so there is not much to disclose. What little there is, is below.

Controller

The controller within the meaning of Art. 4 (7) GDPR is:

Benjamin Bork
Hibiskusweg 25b
13089 Berlin
Germany
contact@benjaminbork.com

What this site does not do

It sets no cookies and uses no comparable storage in your browser. It runs no analytics, tracking, advertising or profiling of any kind. It loads no fonts, scripts, images, videos or other resources from third-party servers — every file the site serves comes from its own domain. There is no contact form, no newsletter and no user account, so there is nothing for you to fill in and nothing for the site to store.

Server log files

Delivering a page over the internet requires your browser to send a request to the server, and the hosting provider records that request in a log file. It typically contains the address of the requested page, the date and time of the request, the amount of data transferred, the browser type and version, the operating system, the referring page and your IP address.

This data is not merged with other sources and is not used to identify you. The legal basis is Art. 6 (1) (f) GDPR: a legitimate interest in delivering the site reliably and securely, and in being able to investigate malfunctions and attacks. The logs are deleted by the hosting provider after a short retention period.

Hosting

This site is hosted by Microsoft Azure Static Web Apps, on servers in the Azure West Europe region. The provider processes the log file data described above on my behalf as a processor, under a data processing agreement pursuant to Art. 28 GDPR.

Contacting me by email

If you write to me, your email address and whatever you put in the message are processed in order to answer it. The legal basis is Art. 6 (1) (f) GDPR — a legitimate interest in responding to enquiries — or Art. 6 (1) (b) GDPR where your message concerns a contract or steps taken before entering into one. I keep the correspondence until the matter is settled and no retention obligation stands in the way of deleting it.

Links to other sites

This site links to pages run by other people, such as documentation and my LinkedIn profile. Following such a link takes you to a server I do not control, and what happens to your data there is governed by that site's own privacy policy, not this one. Nothing is transmitted to those sites until you click the link.

Encryption

The site is served over TLS, so the connection between your browser and the server is encrypted. You can recognise this by the https:// prefix in the address bar.

Your rights

Under the GDPR you have the right to obtain confirmation of whether data about you is being processed and to access that data (Art. 15), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to have processing restricted (Art. 18), to receive your data in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing rests on your consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, write to the address above.

You also have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. The authority responsible for this site is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, though you may also complain to the authority where you live or work.