Privacy Policy

This is a courtesy translation. The German version is the legally binding one.

This website is deliberately lean: it consists of pre-built static files. There is no database, no user accounts, no comment function, no cookies and no analytics. Nothing is loaded from third-party servers either — fonts, images and scripts all come from this server.

Controller

Matthias Karl
Email: info@matthiaskarl.dev

Hosting and server logs

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When a page is requested, the server automatically processes the technical access data your browser transmits:

IP address
date and time of the request
requested address and volume of data transferred
referring page
browser type and operating system

This data is technically necessary to operate and secure the website. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in stable and secure operation. The data is not combined with other sources and is not analysed on a personal level. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

No cookies, no tracking

This website sets no cookies and embeds no analytics or tracking services — neither Google Analytics nor anything comparable. That is also why you see no cookie banner: there is nothing to consent to.

Display preference in local storage

If you switch between light and dark appearance, your choice is stored under the key mk-theme in your browser’s localStorage. Technically this is not a cookie: the value is never transmitted to the server and is only read locally, so the site can render in your chosen appearance on your next visit. You can delete it at any time through your browser settings.

Fonts

The typeface used, DM Sans, is served from this server. There is no connection to Google Fonts or any other third-party provider, so no IP address is transmitted to anyone else when you load a page.

Getting in touch

If you send me an email, I process the details you provide in order to answer your enquiry. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR where the exchange concerns entering into a contract. I delete this data once it is no longer needed and review that need regularly. Statutory retention obligations remain unaffected.

The header and footer link to my profiles on Instagram, LinkedIn, Xing, X and GitHub. These are plain text links, not embedded buttons or tracking pixels. A connection to those providers is only established once you deliberately click such a link. From that point on, the respective provider’s privacy terms apply, and I have no influence over their processing.

The same applies to the App Store and GitHub links on the projects page.

Your rights

You have the right at any time to access the data held about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), and to object to processing based on legitimate interests (Art. 21 GDPR). Please use the address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence or the place of the alleged infringement.

Changes to this policy

I update this privacy policy whenever the website or the legal situation changes. The version published here is the one that applies.