Privacy Policy

1. Who is responsible

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Sebastian Winter
Ahrstr. 37
41352 Korschenbroich
Germany
Email: sebastian@from-sitecore-with-love.de

2. Overview

This is a private blog about Sitecore. I do not use analytics, tracking, advertising or social media plugins, and there is no user registration or contact form. Personal data is only processed where it is technically necessary to deliver this website, where you watch an embedded video, or when you contact me by email. The details are explained below.

3. Hosting and server log files

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, the web server automatically records information that your browser transmits:

• IP address
• date and time of the request
• requested page or file and the HTTP status code
• referrer URL (the page you came from)
• browser type and version, operating system

This data is required to deliver the website and to ensure its security and stability (e.g. to detect attacks). It is not merged with other data sources and is deleted automatically after a short period. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and error-free operation of the website. A data processing agreement in accordance with Art. 28 GDPR has been concluded with STRATO.

4. Encryption

This website uses TLS encryption (recognizable by "https://" and the lock icon in your browser) to protect the transmission of data between your browser and the server.

5. Cookies

This website sets a single, technically necessary session cookie named wcms_sess. It contains a random identifier, is only valid for your current browser session and is deleted when you close your browser. It is not used for tracking or to build profiles. Storing this cookie is permitted without consent under Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG); the processing is based on Art. 6(1)(f) GDPR.

No other cookies are set by this website itself. Embedded YouTube videos may store information in your browser once you start playing them (see section 7).

6. Content delivery network (jsDelivr)

To display this website correctly, the Bootstrap framework (stylesheets and scripts) is loaded from the content delivery network jsDelivr. When a page is loaded, your browser connects to jsDelivr's servers, which therefore receive your IP address and the technical request data listed in section 3. jsDelivr uses partner networks (such as Cloudflare and Fastly) whose servers may be located outside the European Union, including in the USA. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the fast and reliable delivery of the website. Further information: jsDelivr privacy policy.

7. YouTube videos

Some articles embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are embedded in the extended privacy mode (youtube-nocookie.com). According to YouTube, no information about visitors is stored in this mode until you play a video. However, as soon as you open a page with an embedded video, your browser connects to YouTube's servers, which receive at least your IP address and the address of the page. When you start a video, YouTube may store information on your device and process further data, including in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the attractive presentation of talks and tutorials. Further information: Google privacy policy.

8. Calendar downloads and external links

The "Add to calendar" buttons on the events pages create the calendar file directly in your browser; no data is sent to me or to third parties. Links to other websites (e.g. event pages, documentation, GitHub) are plain links: data is only transferred to the other website when you click the link, and its own privacy policy applies there.

9. Contact by email

If you contact me by email, I process your email address, your name (if provided) and the content of your message in order to answer your request. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR if your request relates to a contract. Your data is not passed on and is deleted when it is no longer needed, unless statutory retention obligations apply.

10. Your rights

Under the GDPR you have the right to:

• access the personal data I process about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• restrict the processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation (Art. 21 GDPR).

To exercise these rights, simply send an email to the address in section 1.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

11. Changes to this policy

I update this privacy policy when the website or the legal situation changes. The current version is always available on this page.