← back

Privacy policy

Last updated: 11.11.2026

1. Controller

Gianluca Sima, simagianluca@gmail.com. See the imprint for full details.

2. Hosting

This website is hosted on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technical data such as your IP address, browser type and time of request in order to deliver the website securely (Art. 6 (1) (f) GDPR – legitimate interest in a secure and fast website). Cloudflare is certified under the EU-US Data Privacy Framework.

3. Cookies and local storage

This website only uses technically necessary storage by default:

  • mf_consent – stores your cookie choice (12 months).
  • mf_admin – session cookie for the site owner's admin area only.

Optional services (see below) are only loaded after you give your consent via the cookie banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can change your choice at any time via "cookie settings" in the footer.

4. Contact form

When you use the contact form, the data you enter (name, email, organization, project details, message) is stored in a database (Cloudflare D1) to process your request (Art. 6 (1) (b) GDPR). To prevent abuse, an anonymised hash of your IP address is stored temporarily. Your data is deleted once your request has been fully handled, unless statutory retention obligations apply.

5. Spam protection (Cloudflare Turnstile)

If enabled, the contact form uses Cloudflare Turnstile to distinguish humans from bots (Art. 6 (1) (f) GDPR).

6. Web analytics (optional)

With your consent, this website uses Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies or track individual users across websites.

7. Fonts

All fonts are hosted locally. No connection to Google or other font providers is made.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority.