Legal
Privacy Policy
This website processes as little personal data as technically possible: no analytics cookies, no tracking, no external resources.
Controller
The controller for data processing on this website is:
David Nienhaus, David Nienhaus IT-DienstleistungenBirkhahnweg 5, 48691 Vreden, Germany
Email: david@nienhaus-it.de
Principle of data minimisation
This website is deliberately designed to minimise data. No cookies are set for analytics or marketing purposes, no tracking or analytics services are used, and no external content (such as third-party fonts or scripts, or content delivery networks) is loaded. All resources are served from our own server.
Local storage of the display preference
If you switch between the light and dark appearance, that choice is stored in your browser's session storage under the key dn-theme so that it persists as you move between pages. The entry stays local to your browser, is not transmitted to me or to any third party, and is deleted automatically when you close the browser tab. Because you actively request this storage, it does not require consent under § 25 (2) no. 2 TDDDG; no personal data is processed in the course of it.
Hosting and server log files
The website is hosted by netcup GmbH, Emmy-Noether-Strasse 10, 76131 Karlsruhe, Germany. When the website is accessed, the server automatically processes information in server log files that your browser transmits (e.g. IP address, date and time of access, page requested, browser type). This is technically necessary to deliver the website and ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure operation). The log files are deleted as soon as they are no longer required for that purpose, and after seven days at the latest. This data is not combined with other data sources. A data processing agreement pursuant to Art. 28 GDPR is in place with netcup GmbH.
Contact by email
If you write to me by email, I process the data you provide (e.g. name, email address, message content) solely to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR. The data is deleted once it is no longer required for the purpose and no statutory retention obligations apply.
Appointment booking via Proton Calendar
To arrange an initial consultation I use the booking function of Proton Calendar (Proton AG, Switzerland). When you use the booking link, you leave this website and enter your data directly with Proton. The processing of that data is governed by Proton AG's privacy policy. I receive from Proton the details required to hold the appointment. The legal basis is Art. 6 (1) (b) GDPR. Switzerland is recognised as a country with an adequate level of data protection (EU Commission adequacy decision).
Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). You may withdraw any consent given at any time with effect for the future.
Data protection officer
The conditions requiring the designation of a data protection officer under Art. 37 GDPR and § 38 BDSG are not met. For any data protection matter you can reach me using the contact details above.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestrasse 2–4, 40213 Düsseldorf, Germany.
No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.
Last updated: July 2026