Privacy Policy
Non-binding translation for convenience. Only the German version at /de/datenschutz/ is legally binding.
Data Controller
David Schenk
Korngasse 27
53859 Niederkassel
Germany
Email: kontakt@david-schenk.com
Further mandatory legal information can be found in the Imprint.
Overview
This site loads no analytics or tracking by default. Google Analytics 4 is only loaded after you give explicit consent in the cookie banner. If you decline or have not yet decided, no analytics tools run. Server access logs are processed by Cloudflare for technical operation of the site, as described in the next section.
Server Access Logs (Cloudflare)
When you visit this website, your browser transmits technical data to Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), the infrastructure provider hosting this site. This data includes:
- Your IP address
- Browser and operating system (user agent)
- Date and time of the request
- The URL requested
- HTTP status code
- The referring URL (if any)
This data is processed by Cloudflare solely to deliver the website and is not individually accessible to us. Cloudflare retains access logs for a limited period in accordance with its own data retention policy.
Legal basis: Art. 6 (1)(f) GDPR — legitimate interest in technically operating and delivering the website.
Data processing agreement: We have concluded a Data Processing Agreement (DPA) with Cloudflare pursuant to Art. 28 GDPR. Data may be transferred to the United States on the basis of standard contractual clauses (SCCs) pursuant to Art. 46 (2)(c) GDPR. Cloudflare's privacy information: cloudflare.com/privacypolicy .
Contact Form
When you submit a message via our contact form, we process the data you provide in order to respond to your enquiry.
- Data collected: name, email address, subject, message text
- Purpose: responding to your enquiry
- Legal basis: Art. 6 (1)(b) GDPR — processing necessary for steps taken at your request; Art. 6 (1)(f) GDPR — legitimate interest in protecting the form against automated abuse (honeypot field)
- Processor: Cloudflare Email Routing (Cloudflare, Inc.) — routes messages to our inbox. The same DPA and SCCs described under "Server Access Logs" apply here.
- Retention: Messages are delivered to our inbox and are not stored on this website. Retention in the inbox follows our internal email retention policy.
- Third-country transfer: USA — protected by standard contractual clauses (SCCs, Art. 46 (2)(c) GDPR) via Cloudflare.
Web Analytics — Google Analytics 4
When you give your consent, we use Google Analytics 4 (GA4) to understand visitor behaviour (page views, traffic sources, device types). No analytics are loaded before you accept.
- Legal basis: Art. 6 (1)(a) GDPR (consent); § 25 (1) TDDDG
- Data collected: anonymised IP, user agent, page URL, referrer, device type, session data
- Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — under the Google Ads Data Processing Terms (Art. 28 GDPR)
- Third-country transfer: Google LLC, USA — protected by standard contractual clauses (SCCs, Art. 46 (2)(c) GDPR)
- Retention: 14 months (conservative default; may be configured shorter in GA4 admin)
- Configuration: IP anonymisation on; Google Signals off; ad personalisation off
You can withdraw consent at any time via the "Cookie settings" link in the footer.
Withdrawal immediately stops GA4 and deletes all _ga* and _gid
cookies. Google's privacy policy:
policies.google.com/privacy
.
Cookies & Consent
Your consent decision is stored locally in your browser (localStorage key
wsd-consent-v1) — no cookie is set for this purpose. The banner offers two
categories:
- Necessary: always active; no personal data; no consent required
- Analytics: Google Analytics 4 — only after consent
If you consent to analytics, GA4 sets cookies (_ga, _ga_*)
in your browser. You can withdraw consent at any time via the "Cookie settings" link in
the footer. Upon withdrawal, GA4 is disabled and all _ga* cookies are
deleted immediately.
Your Rights under GDPR
You have the following rights regarding your personal data:
- Access (Art. 15): request information about data we hold about you
- Rectification (Art. 16): request correction of inaccurate data
- Erasure (Art. 17): request deletion of your personal data
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
To exercise your rights, contact: kontakt@david-schenk.com.
Supervisory Authority
You have the right to lodge a complaint with the competent data protection supervisory authority pursuant to Art. 77 GDPR. The lead supervisory authority for our establishment is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestr. 2–4
40213 Düsseldorf
Germany
ldi.nrw.de
Changes to This Policy
We may update this policy as the website evolves or legal requirements change. The date below reflects the last revision.
Last updated: May 2026