Privacy Policy

Non-binding translation for convenience. Only the German version at /de/datenschutz/ is legally binding.

Data Controller

David Schenk
Korngasse 27
53859 Niederkassel
Germany
Email: kontakt@david-schenk.com

Further mandatory legal information can be found in the Imprint.

Overview

This site loads no analytics or tracking by default. Google Analytics 4 is only loaded after you give explicit consent in the cookie banner. If you decline or have not yet decided, no analytics tools run. Server access logs are processed by Cloudflare for technical operation of the site, as described in the next section.

Server Access Logs (Cloudflare)

When you visit this website, your browser transmits technical data to Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), the infrastructure provider hosting this site. This data includes:

  • Your IP address
  • Browser and operating system (user agent)
  • Date and time of the request
  • The URL requested
  • HTTP status code
  • The referring URL (if any)

This data is processed by Cloudflare solely to deliver the website and is not individually accessible to us. Cloudflare retains access logs for a limited period in accordance with its own data retention policy.

Legal basis: Art. 6 (1)(f) GDPR — legitimate interest in technically operating and delivering the website.

Data processing agreement: We have concluded a Data Processing Agreement (DPA) with Cloudflare pursuant to Art. 28 GDPR. Data may be transferred to the United States on the basis of standard contractual clauses (SCCs) pursuant to Art. 46 (2)(c) GDPR. Cloudflare's privacy information: cloudflare.com/privacypolicy .

Contact Form

When you submit a message via our contact form, we process the data you provide in order to respond to your enquiry.

  • Data collected: name, email address, subject, message text
  • Purpose: responding to your enquiry
  • Legal basis: Art. 6 (1)(b) GDPR — processing necessary for steps taken at your request; Art. 6 (1)(f) GDPR — legitimate interest in protecting the form against automated abuse (honeypot field)
  • Processor: Cloudflare Email Routing (Cloudflare, Inc.) — routes messages to our inbox. The same DPA and SCCs described under "Server Access Logs" apply here.
  • Retention: Messages are delivered to our inbox and are not stored on this website. Retention in the inbox follows our internal email retention policy.
  • Third-country transfer: USA — protected by standard contractual clauses (SCCs, Art. 46 (2)(c) GDPR) via Cloudflare.

Web Analytics — Google Analytics 4

When you give your consent, we use Google Analytics 4 (GA4) to understand visitor behaviour (page views, traffic sources, device types). No analytics are loaded before you accept.

  • Legal basis: Art. 6 (1)(a) GDPR (consent); § 25 (1) TDDDG
  • Data collected: anonymised IP, user agent, page URL, referrer, device type, session data
  • Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — under the Google Ads Data Processing Terms (Art. 28 GDPR)
  • Third-country transfer: Google LLC, USA — protected by standard contractual clauses (SCCs, Art. 46 (2)(c) GDPR)
  • Retention: 14 months (conservative default; may be configured shorter in GA4 admin)
  • Configuration: IP anonymisation on; Google Signals off; ad personalisation off

You can withdraw consent at any time via the "Cookie settings" link in the footer. Withdrawal immediately stops GA4 and deletes all _ga* and _gid cookies. Google's privacy policy: policies.google.com/privacy .

Cookies & Consent

Your consent decision is stored locally in your browser (localStorage key wsd-consent-v1) — no cookie is set for this purpose. The banner offers two categories:

  • Necessary: always active; no personal data; no consent required
  • Analytics: Google Analytics 4 — only after consent

If you consent to analytics, GA4 sets cookies (_ga, _ga_*) in your browser. You can withdraw consent at any time via the "Cookie settings" link in the footer. Upon withdrawal, GA4 is disabled and all _ga* cookies are deleted immediately.

Your Rights under GDPR

You have the following rights regarding your personal data:

  • Access (Art. 15): request information about data we hold about you
  • Rectification (Art. 16): request correction of inaccurate data
  • Erasure (Art. 17): request deletion of your personal data
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)

To exercise your rights, contact: kontakt@david-schenk.com.

Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority pursuant to Art. 77 GDPR. The lead supervisory authority for our establishment is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestr. 2–4
40213 Düsseldorf
Germany
ldi.nrw.de

Changes to This Policy

We may update this policy as the website evolves or legal requirements change. The date below reflects the last revision.

Last updated: May 2026