Privacy policy

Last updated: 15 October 2026

1. Who is responsible

Responsible for the processing of personal data on hoja.in and hoja.in/blog (controller under Art. 4 (7) GDPR):

Email: hoja@ymail.com

2. The short version

• No analytics, no tracking, no advertising, no social media plugins.
• Fonts, scripts and images are served from this server. Pages do not load anything from third-party servers.
• The portfolio sets no cookies. The blog sets cookies only when you write a comment and ask it to remember you, or when you accept the cookie notice.
• Data you send me (contact form, comments) is used only to answer you or to publish your comment.

3. Hosting and server log files

This website is hosted by [Hosting provider, address]. When you open a page, the web server automatically logs: your IP address, date and time, the requested page, the referring page, the HTTP status and the browser and operating system you use.

This is necessary to deliver the website and to keep it secure, for example to detect attacks (legitimate interest, Art. 6 (1) (f) GDPR). The log files are deleted after [number] days, unless they are needed as evidence for a security incident. I have concluded a data processing agreement with the hosting provider (Art. 28 GDPR).

4. Encryption

The website uses TLS (HTTPS). Data you send through forms cannot be read by third parties on the way.

5. Contact form and email

When you use the contact form, I receive your name, email address, subject and message by email. The form does not store your message in a database on this website. I use the data only to answer your request (Art. 6 (1) (b) GDPR if it concerns a contract or job, otherwise my legitimate interest in answering, Art. 6 (1) (f) GDPR) and delete it when the conversation is finished, unless I have to keep it by law. The same applies when you write to me by email.

6. Blog comments

When you write a comment, the blog stores your name, email address, optional website, the comment and, for spam protection, your IP address and browser identifier. Your name, website and comment are published; your email address and IP address are not.

New comments are checked for spam with Akismet, a service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. For this check, your comment, name, email address, website, IP address and browser identifier are sent to Automattic. This can include a transfer to the USA. The legal basis is my legitimate interest in keeping the blog free of spam (Art. 6 (1) (f) GDPR). Akismet's privacy information: automattic.com/privacy.

Comments are stored until you ask me to delete them or the post is removed. You can object at any time by email.

7. Cookies

The portfolio at hoja.in sets no cookies. The blog uses only these cookies:

• cookie_notice_accepted: remembers your choice in the cookie notice, stored for one month.
• comment_author_…: remembers your name, email and website for the next comment, only if you tick the box under the comment form; stored for one year.
• wordpress_…, wp-settings-…: only for the blog's administrator after logging in.

Cookies that are needed for a function you asked for are based on § 25 (2) TDDDG and Art. 6 (1) (f) GDPR; the comment cookies are set only with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can delete cookies in your browser at any time.

8. Links to other websites

Links to LinkedIn, GitHub, Stack Overflow, X and other websites are plain links. No data is sent to these services until you click a link; from then on, their privacy policies apply.

9. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw a consent at any time with effect for the future (Art. 7 (3)). Write to hoja@ymail.com.

You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). For me, this is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), www.lda.bayern.de.