Miran Arnaut logo Miran Arnaut logo
(08) Legal

Privacy Policy

Information about the processing of personal data on miran.at.

This privacy policy explains what personal data is processed when you visit miran.at, why that happens, and what rights you have.

Controller

Miran Arnaut
Westring 12
76275 Ettlingen
Germany

Phone: +49 176 460 96373
Email: arnaut@miran.at

Hosting and server log files

This website is delivered from a self-managed infrastructure using nginx. When pages are requested, technically necessary connection data is processed in server log files, especially IP address, date and time, requested URL, referrer, amount of transferred data, browser type and operating system.

The processing is necessary to deliver the website, defend against attacks, and keep the service stable. The legal basis is Article 6(1)(f) GDPR.

Depending on the active deployment path, access may additionally be routed through Cloudflare Tunnel. In that case Cloudflare processes connection and security metadata as a network and infrastructure provider. The legal basis is also Article 6(1)(f) GDPR.

Log data is kept only as long as required to operate the website securely and investigate abuse.

Local browser storage

This website uses local browser storage only where it is required for requested features:

  • analytics_consent stores your consent choice for 180 days.
  • theme stores your theme preference locally in your browser.
  • Interactive utilities may store your entries only on your device, for example under keys such as tracker_[page-path].
  • The profile page stores the selected text length locally under bio-length.

Unless you actively send data by email, this information is not transmitted to me. The legal basis is section 25(2) no. 2 TDDDG and Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where the storage is part of a feature you requested.

Google Analytics

Google Analytics is loaded on this website only after you have expressly opted in via the consent banner. No Google Analytics request is triggered before consent.

The provider for users in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further processing by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, cannot be ruled out.

If you consent, Google may process page views, browser and device information, referrer data, interactions with the website, and approximate location data. Google may set cookies or similar identifiers such as _ga, _ga_*, _gid, or comparable analytics identifiers for this purpose.

The legal basis for storing or reading information on your device is your consent under section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

The storage duration depends on the lifetime of the cookies used and on the retention settings configured in the Google Analytics property. You can withdraw consent at any time with future effect via the “Cookie Settings” link in the footer.

For transfers to third countries, Google states that it relies on appropriate safeguards, in particular EU Standard Contractual Clauses and supplementary measures.

Plausible Analytics (self-hosted)

This website uses Plausible Analytics in its self-hosted Community Edition. Plausible is a privacy-friendly web analytics tool that runs entirely on my own server. No data is shared with third parties.

Plausible does not use cookies and does not store any personal data. It collects the following information in anonymized form:

  • pages visited (URL)
  • referrer (the page you came from)
  • browser and operating system
  • device type (desktop, tablet, mobile)
  • approximate geographic location (country level)
  • date and time of access

Your IP address is not stored by Plausible — it is anonymized immediately during processing. It is not possible to identify you personally. The data is used solely for reach measurement and improving the website.

Plausible — like Google Analytics — is loaded only after you have given your explicit consent via the consent banner. The legal basis is Article 6(1)(a) GDPR.

Contact by email

If you contact me by email, I process the data you send in order to answer your request. The legal basis is Article 6(1)(b) GDPR where your request is related to entering into a contract and otherwise Article 6(1)(f) GDPR.

The data remains stored for as long as required to handle the request, any follow-up questions, or statutory retention duties.

Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of any consent with future effect.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority relevant to my business is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: www.baden-wuerttemberg.datenschutz.de