Last updated: 25 September 2026
Controller
The controller responsible for processing personal data on andregoepel.dev is DA Web Solutions OÜ, Männimäe, Pudisoo küla, 74626 Kuusalu vald, Harju maakond, Estonia, represented by André Göpel and Daniela Maas.
For privacy questions and requests concerning your rights, contact andre@andregoepel.dev.
Hosting and delivery of the website
We operate this website and its database on a virtual server hosted by IONOS in Germany. The technical service provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
When you access the website, data necessary to establish the connection and deliver the requested content is processed. This includes your IP address, the time and target of your request and information transmitted by your browser, such as its type and, where applicable, the referring page. Technical logs may also contain response statuses and error messages.
This processing provides the website, supports troubleshooting and protects against attacks and abuse. Its legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Retention of technical logs is determined by the need to identify and investigate operational problems and security incidents. Data must be deleted or anonymised once it is no longer needed for those purposes. Data relating to a specific incident may be retained until the investigation is complete and, where necessary, for the establishment, exercise or defence of legal claims.
Contact by email and telephone
If you contact us by email, we process your email address, the information you provide and the contents of your message, including any attachments. Emails are processed through IONOS Mail.
You can also contact us by telephone on +49 156 78356625. We process your telephone number where transmitted, and the information you provide to handle your enquiry. Where necessary for this purpose, we may make notes of the conversation. The telecommunications providers involved process connection data to carry the call.
For enquiries concerning a possible or existing contract to which you are personally a party, the legal basis is Article 6(1)(b) GDPR. Other business correspondence, including communication with representatives of companies, is based on Article 6(1)(f) GDPR. Our legitimate interest is handling and responding to your enquiry.
Contact details and correspondence are needed for as long as necessary to handle the enquiry and any required follow-up. If a contractual relationship results, subsequent retention depends on performance of that contract and applicable statutory retention requirements. Where data is necessary for the establishment, exercise or defence of legal claims, it may be retained until that purpose no longer applies. Retention required by law is based on Article 6(1)(c) GDPR.
Notifications about new blog posts
You can subscribe with your email address to receive notifications about new blog posts. We use double opt-in: after signing up, you receive an email containing a confirmation link. Your address is activated for blog notifications only after you follow that link.
The application stores your email address, selected language, the times of signup, confirmation-email dispatch and confirmation, and a technical confirmation and unsubscribe token. This data manages your subscription and records its confirmation. Emails are sent through IONOS Mail.
The legal basis for blog notifications is your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future by following the unsubscribe link in a relevant email or contacting us at the address above. Withdrawal does not affect the lawfulness of processing before withdrawal.
When you unsubscribe, the application deletes your subscription record from the active recipient list. Unconfirmed signups are removed during the next regular cleanup run after seven days have elapsed since the most recent confirmation email was sent. Technical delivery logs and any existing backups are subject to the respective retention criteria described here.
Your email address is necessary to deliver these notifications. Subscription is voluntary; you can continue to read the website and blog without subscribing.
Language preferences, colour scheme and restricted administration area
When you switch language, the website stores your choice in the ag-lang cookie. It contains the language code and has an intended lifetime of one year. Your display preference, such as light or dark mode, is saved in your browser's local storage under site-theme. The application may also store a language preference there under ag-lang. Local-storage entries have no automatically specified expiry and remain until removed or overwritten.
This information supports your selected presentation. Any related processing of personal data is based on Article 6(1)(f) GDPR; our interest is remembering the settings you selected during subsequent visits. You can delete cookies and local website data in your browser, which also removes the saved preferences.
The restricted administration area additionally uses authentication and security functions. This involves processing the account data necessary for authentication and technical session information. These functions control access and protect editorial administration. The legal basis is Article 6(1)(f) GDPR.
Recipients and backups
IONOS processes data as a technical provider of hosting and email services.
Backups serve recovery following data loss or technical failure. Full backups are retained for 12 months, differential backups for 3 months and incremental backups for 1 month. Data deleted from the active system may remain in existing backups until these retention periods expire.
Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future.
Where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time without providing such grounds.
To exercise your rights, contact andre@andregoepel.dev.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence, place of work or an alleged infringement. Estonia's data protection supervisory authority is the Andmekaitse Inspektsioon. Information and contact details are available at aki.ee.