Privacy notice

Last updated: July 30, 2026

1. Controller

2. Scope

This notice applies to the portfolio and free experimental project sites at daviddam.de, pdscanlation.daviddam.de, hwsuche.daviddam.de, pd-voice-agent.daviddam.de, ygo-db-stats.daviddam.de and cv.daviddam.de.

3. Hosting and server logs

When a page is requested, hosting and infrastructure providers process technically necessary connection data, such as the IP address, date and time, requested address, transferred volume, referrer, browser, operating system and response status. This is used for delivery, stability, troubleshooting and attack prevention. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure operation of the sites. Providers delete or anonymise this data under their respective retention rules.

4. Data actively provided

A visitor-selected function may process text, files, audio, identifiers, settings and related metadata only to perform the requested function. The exact data depends on the function chosen. Where processing is necessary for the requested service, the legal basis is Article 6(1)(b) GDPR; for secure operation and abuse prevention, it is Article 6(1)(f) GDPR.

5. Data from public or external sources

Project functions may process personal data from publicly available or external sources. This includes publicly available listings, identifiers, and activity and statistical data. Processing serves aggregation, search and statistical presentation of publicly available information. The legal basis is Article 6(1)(f) GDPR; our legitimate interests are these information, search and statistical purposes.

Retention criteria include data currency, continued purpose, operational necessity, legal obligations and legitimate claims. Individuals may object to this processing on grounds relating to their particular situation.

6. Browser storage and sessions

Necessary local storage, cookies or equivalent mechanisms may be used for language, settings, sessions and access protection. Access is necessary under section 25(2)(2) TDDDG; the applicable Article 6 GDPR basis is Article 6(1)(b) or (f) GDPR. Visitors can remove local values through browser controls, but necessary functions may then stop working.

7. Recipients and external services

Depending on the selected function, recipients may include categories of hosting and infrastructure, communication, database and storage, security, and AI service providers. A provider receives only the data needed for the selected function. Ordinary external links transmit data only after they are opened.

8. International transfers

Where data is processed outside the European Economic Area, transfers use the applicable safeguards under Chapter V GDPR. These include adequacy decisions for certified organisations or Standard Contractual Clauses.

9. Contact by email

If you contact us by email, we process your sender address, message and the metadata needed to handle it. The legal basis is Article 6(1)(f) GDPR or, for pre-contractual communication, Article 6(1)(b) GDPR. Data is deleted after the request is resolved unless legal retention duties or legitimate grounds require further retention.

10. Retention

Data is kept only as long as required for the requested function, security, legal obligations or legitimate claims. Relevant criteria include function completion, session expiry, operational necessity and statutory retention periods.

11. Data subject rights and complaints

Subject to the GDPR, individuals have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn at any time for the future. Requests can be sent to david.dev.dam@proton.me.

Complaints: You may also lodge a complaint with a data protection authority. The competent authority includes the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.

12. Updates

This notice is updated when relevant processing or legal requirements change. The version published on this page applies.