Language: Deutsch English
Website privacy notice
This notice covers the website polly.mierzwa.net only. The Polly iPhone app has its own, separate policy: app privacy policy.
Short version: this website sets no cookies, embeds no analytics or advertising, loads nothing from third-party servers, and keeps no access logs. That is also why there is no cookie banner: there is nothing to consent to.
1. Controller
The controller under Art. 4(7) GDPR is:
Adam Jakub MierzwaGerichtstraße 20
22765 Hamburg
Germany
Email: privacy@mierzwa.net
There is no statutory obligation to appoint a data protection officer.
2. Hosting
The site runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, physically located in Germany (Nuremberg). A data processing agreement under Art. 28 GDPR is in place. Hetzner processes connection data solely to provide and secure the server.
3. Visiting the site
For your browser to display this page it has to connect to the server, which necessarily involves processing the connection data required to do that: your IP address, the address you requested, and details your browser sends. This is not technically avoidable.
The web server keeps no access logs. That data is processed in memory while the page is served and is not written anywhere afterwards. No lasting record of your visit is created, with or without an IP address.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is being able to deliver the page you asked for.
4. Encryption
The site is reachable over HTTPS only. Certificates come from Let’s Encrypt (Internet Security Research Group). Issuing and renewing a certificate transmits the domain name, not data about individual visitors.
5. Cookies and storage on your device
This website sets no cookies and writes nothing to local storage, session storage, or comparable mechanisms. There is no access to information on your terminal equipment within the meaning of section 25 TDDDG (the German implementation of the ePrivacy rules). Consent is therefore not required and no consent banner is shown.
6. Fonts and third-party content
The typeface used (Nunito, SIL Open Font License) is served from this server. There is no connection to Google Fonts or any other content delivery network. Images, stylesheets, and scripts likewise live on this server only. Loading the page transmits your IP address to no third party.
7. No analytics, no tracking, no advertising
This website runs no analytics, no audience measurement, no ad networks, and no social media plugins. No profiles are built and no automated decision-making within the meaning of Art. 22 GDPR takes place.
To be clear about the boundary: the Polly app does use an analytics tool (PostHog, EU-hosted). That applies to the app, not to this website. Details are in the app privacy policy.
8. Links to other services
This site links to Apple’s App Store in several places. Such a link is only followed when you click it, and from that point the other provider’s privacy policy applies to processing I have no influence over. See Apple’s privacy policy.
9. Contacting me by email
If you write to me, I process what your message contains (sender address, content, timestamp) in order to answer it. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your enquiry relates to a contract. I delete correspondence once it is no longer needed and no retention obligation applies.
10. Recipients and third countries
Apart from the host named above, nobody receives data from the operation of this website. No transfer to third countries outside the EU or EEA takes place.
11. Your rights
You have the following rights against the controller:
- Access to the data processed about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
In practice: because nothing is stored when you visit this website, there is usually no data for an access or erasure request to attach to. You are still welcome to ask.
Separately, under Art. 77 GDPR you may lodge a complaint with a supervisory authority. The competent authority for me is:
Der Hamburgische Beauftragte für Datenschutz und InformationsfreiheitLudwig-Erhard-Straße 22, 20459 Hamburg, Germany
datenschutz-hamburg.de
12. Changes to this notice
If how this website operates changes, for instance because a new service is added, I will update this notice and the date shown above.