Legal
Imprint
Information according to § 5 DDG:
Michael Dewald
Woogtalstraße 1
61462 Königstein im Taunus
Germany
Contact:
Email: mail@michaeldewald.com
Website: www.michaeldewald.com
Responsible for content: Michael Dewald
Professional title: Master of Science in Computer Science
Michael Dewald
Woogtalstraße 1
61462 Königstein im Taunus
Germany
Contact:
Email: mail@michaeldewald.com
Website: www.michaeldewald.com
Responsible for content: Michael Dewald
Professional title: Master of Science in Computer Science
Privacy Policy
We take the protection of your personal data very seriously. The following explains the technical processing on this website and our postal marketing to businesses.
1. Controller
Michael Dewald
Woogtalstraße 1
61462 Königstein im Taunus
Email: mail@michaeldewald.com
2. Local settings and cookies
This website does not use analytics or marketing cookies. Your selected language is stored in a technically necessary cookie. The light or dark theme preference is stored only locally in your browser.
3. Usage statistics with Umami
We use a self-hosted Umami instance on our own infrastructure to measure reach. Umami does not use cookies and does not store IP addresses. For each visit, Umami briefly processes your IP address and your browser identifier (user agent): the approximate location (country, region and city) is derived from the IP address, and a pseudonymous session identifier is calculated from the IP address, the browser identifier and a value that changes every month. For each visit we store the time, the page visited and the referring page, this session identifier, browser, operating system, device category, screen resolution, language setting and the approximate location. We evaluate this data in aggregate and do not attribute page views to any person or business. When an app download is clicked, we additionally record the event name, app identifier, and published build identifier. The data is not sent to advertising networks or Umami Cloud. This processing supports secure operation and needs-based improvement of the website based on our legitimate interest under Article 6(1)(f) GDPR.
Counting QR code visits (pseudonymous)
The QR code on our letters and postcards first leads to an address on this website (michaeldewald.com/e/…), which counts the visit and then forwards you to the website draft. We count the event “qr-scan” with the identifier of the draft, without cookies and without storing anything in your browser; the same technical data as for a page view (see above) is processed and stored. Because each QR code belongs to exactly one draft and therefore to one business we wrote to, such a visit can be attributed to that business. This count is therefore not anonymous but pseudonymous. The draft itself is not measured. We use the count to evaluate the success of our postal marketing; a counted visit only records access to the redirect address and establishes neither that the QR code was actually scanned nor that the intended recipient received or read the mailing. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. We delete the visits counted for a draft together with the business details (section 8). Deleted visits remain in the regular backups of our statistics database until those backups are deleted automatically after no more than three months. We use these backups only to restore data after an outage and to test such a restore; after a restore, we delete again any visits that had already been deleted.
4. Contact form and email delivery
When you use the contact form, we process your name, email address, and message to handle your request. Resend (Plus Five Five, Inc., USA) provides the technical email delivery service. The contact details and message content needed for delivery are transmitted to Resend. Resend is certified under the EU-U.S. Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Article 45 GDPR).
5. Spam protection
The contact form uses Cloudflare Turnstile to detect automated requests. Turnstile processes browser signals that are technically necessary for this security function. According to Cloudflare, Turnstile does not access form entries or message content. The provider is Cloudflare, Inc. (USA). Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Article 45 GDPR).
6. Your rights
You have rights including access, correction, deletion, restriction of processing, data portability, and objection. Contact mail@michaeldewald.com. You may also file a complaint with a data protection supervisory authority.
7. Retention
Contact form data and emails are retained only as long as necessary to handle the request and meet legal retention obligations. Umami statistics are retained only to analyze website usage; section 8 applies to counted QR code visits, and section 3 to their backups. Section 8 also applies to information about businesses we write to or have checked, and to the suppression list.
8. Letters or postcards to businesses with a website draft
When we present a website draft to your business by postcard or letter, we process information about the business: name, business address, website address and telephone number, plus publicly visible information about its online presence (own website, entries in business directories and map services, reviews, without reviewers’ names or profiles) from which we design the draft. This information comes from publicly accessible sources; the card or letter names the specific source. We write to the business, not to a person: we do not use the names of owners or employees for this and do not collect them deliberately; where the name of the business is also a personal name, for example for practices or sole proprietorships, we process it as part of the business name. We also record when we checked the business, created the draft and sent the card, and when a reply came in. The legal basis is our legitimate interest in direct marketing under Article 6(1)(f) GDPR.
Printing and sending the postcards is handled by EchtPost Macher UG (haftungsbeschränkt), Herderstraße 70, 50931 Köln, Germany, as our processor (Article 28 GDPR). For this it receives the card text with the name and address of the business.
The draft is publicly reachable at its address, but we do not link to it anywhere, and a “noindex” instruction asks search engines not to include it in their results; anyone who knows the address can open it. Because each draft has its own TLS certificate, its address also appears in the public Certificate Transparency logs; these are run by third parties, an entry cannot be deleted and remains after the draft has gone offline. The draft itself is not measured and goes offline after the date stated on the card or in the letter; section 3 explains how we count QR code visits.
If we do not write to a business we have checked, we delete its information no later than twelve months after the check; until then we keep it only so that we do not check the same business again at short intervals. We do not notify such a business separately because the information is publicly accessible and this policy describes it (Article 14(5)(b) GDPR). If no collaboration results from a card, we delete the business details and the QR code visits counted for its draft no later than three months after the draft expires. If a collaboration follows, we keep the information for its duration and as required by statutory retention obligations. Deleted business details, including after an objection, remain in our regular backups until they are rotated out, at most five months after deletion. We use these backups only to restore data after a failure and to test such restores; the legal basis is our legitimate interest in the security and recoverability of our systems (Article 6(1)(f) GDPR).
You may object to the use of your data for direct marketing at any time without giving reasons (Article 21(2) GDPR), for example by email to mail@michaeldewald.com. We then no longer process it for marketing purposes (Article 21(3) GDPR): we take the draft offline immediately and delete the remaining information, including the QR code visits counted; only the suppression list entry and the backups until they are rotated out (see above) are excepted. If a business already objects to receiving advertising in its own privacy policy or legal notice, we do not write to it. In both cases we add the business to our suppression list so that it receives no marketing from us. The suppression list contains the name and address of the business, website address and telephone number (so that we recognize it under a different spelling), the date and channel of the objection and, if it comes from its privacy policy or legal notice, that page’s address, the date we retrieved it and the wording of the objection clause, not the rest of the text. It serves solely to honor and document the objection (Article 6(1)(c) GDPR in conjunction with Article 21(3) GDPR, and Article 6(1)(f) GDPR in conjunction with section 7 UWG). We keep the entry for as long as we send marketing by post, and delete it when we stop.
1. Controller
Michael Dewald
Woogtalstraße 1
61462 Königstein im Taunus
Email: mail@michaeldewald.com
2. Local settings and cookies
This website does not use analytics or marketing cookies. Your selected language is stored in a technically necessary cookie. The light or dark theme preference is stored only locally in your browser.
3. Usage statistics with Umami
We use a self-hosted Umami instance on our own infrastructure to measure reach. Umami does not use cookies and does not store IP addresses. For each visit, Umami briefly processes your IP address and your browser identifier (user agent): the approximate location (country, region and city) is derived from the IP address, and a pseudonymous session identifier is calculated from the IP address, the browser identifier and a value that changes every month. For each visit we store the time, the page visited and the referring page, this session identifier, browser, operating system, device category, screen resolution, language setting and the approximate location. We evaluate this data in aggregate and do not attribute page views to any person or business. When an app download is clicked, we additionally record the event name, app identifier, and published build identifier. The data is not sent to advertising networks or Umami Cloud. This processing supports secure operation and needs-based improvement of the website based on our legitimate interest under Article 6(1)(f) GDPR.
Counting QR code visits (pseudonymous)
The QR code on our letters and postcards first leads to an address on this website (michaeldewald.com/e/…), which counts the visit and then forwards you to the website draft. We count the event “qr-scan” with the identifier of the draft, without cookies and without storing anything in your browser; the same technical data as for a page view (see above) is processed and stored. Because each QR code belongs to exactly one draft and therefore to one business we wrote to, such a visit can be attributed to that business. This count is therefore not anonymous but pseudonymous. The draft itself is not measured. We use the count to evaluate the success of our postal marketing; a counted visit only records access to the redirect address and establishes neither that the QR code was actually scanned nor that the intended recipient received or read the mailing. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. We delete the visits counted for a draft together with the business details (section 8). Deleted visits remain in the regular backups of our statistics database until those backups are deleted automatically after no more than three months. We use these backups only to restore data after an outage and to test such a restore; after a restore, we delete again any visits that had already been deleted.
4. Contact form and email delivery
When you use the contact form, we process your name, email address, and message to handle your request. Resend (Plus Five Five, Inc., USA) provides the technical email delivery service. The contact details and message content needed for delivery are transmitted to Resend. Resend is certified under the EU-U.S. Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Article 45 GDPR).
5. Spam protection
The contact form uses Cloudflare Turnstile to detect automated requests. Turnstile processes browser signals that are technically necessary for this security function. According to Cloudflare, Turnstile does not access form entries or message content. The provider is Cloudflare, Inc. (USA). Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Article 45 GDPR).
6. Your rights
You have rights including access, correction, deletion, restriction of processing, data portability, and objection. Contact mail@michaeldewald.com. You may also file a complaint with a data protection supervisory authority.
7. Retention
Contact form data and emails are retained only as long as necessary to handle the request and meet legal retention obligations. Umami statistics are retained only to analyze website usage; section 8 applies to counted QR code visits, and section 3 to their backups. Section 8 also applies to information about businesses we write to or have checked, and to the suppression list.
8. Letters or postcards to businesses with a website draft
When we present a website draft to your business by postcard or letter, we process information about the business: name, business address, website address and telephone number, plus publicly visible information about its online presence (own website, entries in business directories and map services, reviews, without reviewers’ names or profiles) from which we design the draft. This information comes from publicly accessible sources; the card or letter names the specific source. We write to the business, not to a person: we do not use the names of owners or employees for this and do not collect them deliberately; where the name of the business is also a personal name, for example for practices or sole proprietorships, we process it as part of the business name. We also record when we checked the business, created the draft and sent the card, and when a reply came in. The legal basis is our legitimate interest in direct marketing under Article 6(1)(f) GDPR.
Printing and sending the postcards is handled by EchtPost Macher UG (haftungsbeschränkt), Herderstraße 70, 50931 Köln, Germany, as our processor (Article 28 GDPR). For this it receives the card text with the name and address of the business.
The draft is publicly reachable at its address, but we do not link to it anywhere, and a “noindex” instruction asks search engines not to include it in their results; anyone who knows the address can open it. Because each draft has its own TLS certificate, its address also appears in the public Certificate Transparency logs; these are run by third parties, an entry cannot be deleted and remains after the draft has gone offline. The draft itself is not measured and goes offline after the date stated on the card or in the letter; section 3 explains how we count QR code visits.
If we do not write to a business we have checked, we delete its information no later than twelve months after the check; until then we keep it only so that we do not check the same business again at short intervals. We do not notify such a business separately because the information is publicly accessible and this policy describes it (Article 14(5)(b) GDPR). If no collaboration results from a card, we delete the business details and the QR code visits counted for its draft no later than three months after the draft expires. If a collaboration follows, we keep the information for its duration and as required by statutory retention obligations. Deleted business details, including after an objection, remain in our regular backups until they are rotated out, at most five months after deletion. We use these backups only to restore data after a failure and to test such restores; the legal basis is our legitimate interest in the security and recoverability of our systems (Article 6(1)(f) GDPR).
You may object to the use of your data for direct marketing at any time without giving reasons (Article 21(2) GDPR), for example by email to mail@michaeldewald.com. We then no longer process it for marketing purposes (Article 21(3) GDPR): we take the draft offline immediately and delete the remaining information, including the QR code visits counted; only the suppression list entry and the backups until they are rotated out (see above) are excepted. If a business already objects to receiving advertising in its own privacy policy or legal notice, we do not write to it. In both cases we add the business to our suppression list so that it receives no marketing from us. The suppression list contains the name and address of the business, website address and telephone number (so that we recognize it under a different spelling), the date and channel of the objection and, if it comes from its privacy policy or legal notice, that page’s address, the date we retrieved it and the wording of the objection clause, not the rest of the text. It serves solely to honor and document the objection (Article 6(1)(c) GDPR in conjunction with Article 21(3) GDPR, and Article 6(1)(f) GDPR in conjunction with section 7 UWG). We keep the entry for as long as we send marketing by post, and delete it when we stop.
Disclaimer
The contents of this website have been created with the utmost care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content. As a service provider, we are responsible for our own content on these pages under the general laws. However, we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.
Copyright
The content and works created by the site operator on these pages are subject to German copyright law. The reproduction, editing, distribution, and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator.
External Links
This website contains links to external third-party websites, over whose content we have no influence. The respective provider or operator of the pages is always responsible for the content of the linked pages.
Terms of Use
Welcome to my website. By using this website, you agree to the following terms:
1. Use of the Website
The content of this website may only be used for personal, non-commercial purposes. Reproduction, editing, or other use without prior written consent is prohibited.
2. Code of Conduct
When using the website, particularly when using the contact form, you agree not to transmit offensive, defamatory, threatening, obscene, or otherwise illegal content.
3. Limitation of Liability
The use of the content provided is at your own risk. No liability is assumed for damages resulting from the use of this website to the extent permitted by law.
4. Changes to the Terms of Use
We reserve the right to change these terms of use at any time. Continued use of the website after such changes is considered acceptance of the new terms.
5. Applicable Law
These terms of use are subject to German law. The place of jurisdiction is, to the extent legally permissible, Königstein im Taunus, Germany.
1. Use of the Website
The content of this website may only be used for personal, non-commercial purposes. Reproduction, editing, or other use without prior written consent is prohibited.
2. Code of Conduct
When using the website, particularly when using the contact form, you agree not to transmit offensive, defamatory, threatening, obscene, or otherwise illegal content.
3. Limitation of Liability
The use of the content provided is at your own risk. No liability is assumed for damages resulting from the use of this website to the extent permitted by law.
4. Changes to the Terms of Use
We reserve the right to change these terms of use at any time. Continued use of the website after such changes is considered acceptance of the new terms.
5. Applicable Law
These terms of use are subject to German law. The place of jurisdiction is, to the extent legally permissible, Königstein im Taunus, Germany.