Privacy policy

Who is responsible

Philipp John
Dudenstraße 24, 10965 Berlin
Germany
Email: hello@philippjohn.com

The short version

Fonts and images come from this server. Analytics only runs if you allow it in the cookie bar, and you can change that any time under Manage cookies in the footer. Otherwise personal data is only processed when you write to me or ask for the case study password.

Hosting and server logs

The website and my email are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. STRATO processes data on my behalf under a data processing agreement (Art. 28 GDPR).

When you open a page, the server records technical data in log files: your IP address, date and time, the page requested, the amount of data sent, the referring page, and your browser and operating system. This is necessary to deliver the website and to keep it secure (Art. 6 (1) (f) GDPR). STRATO deletes the log files automatically after about six weeks. They are not combined with other data.

The connection to this website is encrypted (TLS). You can tell by the lock icon and "https" in the address bar.

Contact form, email and password requests

When you use the contact form, ask for the case study password or send me an email, I receive your name, your email address, your company if you give it, your message and the page you sent it from. I use this data only to answer you and, if we work together, to prepare and carry out the project (Art. 6 (1) (b) GDPR), otherwise on the basis of my legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

I delete the messages when the conversation is over. Messages that lead to a contract are kept as long as commercial and tax law requires, usually six to ten years.

To protect the forms against spam, the server briefly stores a shortened, non-reversible fingerprint of your IP address to limit the number of messages per hour. It is deleted automatically after one day.

Data stored in your browser

This website stores a few small entries in your browser. They are not cookies, they are never sent to me and they are only used for features you use yourself (§ 25 (2) no. 2 TDDDG):

• When you unlock a case study, a key derived from the password is kept in local storage for 30 days, so you don't have to enter it on every page.
• While you browse, the position of the navigation highlight and whether you closed the password dialog are kept in session storage until you close the tab.
• Your choice in the cookie bar is kept in local storage, so you are not asked again on every page.

Analytics with Google Analytics 4

If you allow analytics in the cookie bar, this website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Without your consent Google Analytics is not loaded at all.

Google Analytics shows me how visitors use the website: which pages are viewed, for how long, from which kind of device and roughly from which country and region. For this it sets cookies (_ga and ga followed by an ID) that are kept for up to two years and recognise your browser on later visits. Google does not log or store IP addresses for visitors from the EU. Advertising features and Google signals are switched off. In Google Analytics the data is kept for two months and then deleted.

The legal basis is your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). You can withdraw it at any time, here or under Manage cookies in the footer. The cookies are then deleted and nothing more is measured.

Manage cookies

Google processes the data on my behalf under a data processing agreement. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). More in Google's privacy policy.

You can delete these entries at any time by clearing your browser data for this site.

Who receives your data

Apart from STRATO as my hosting and email provider and, only with your consent, Google for analytics (see above), I don't pass your data on. There is no automated decision-making.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). A short email to hello@philippjohn.com is enough.

Changes

I update this policy when the website changes. The date at the top shows the current version.