← Back to the book

Privacy policy

Last updated: October 2026

1. Controller

Philipp Frisch, Mackenroder Weg 2, 12347 Berlin, Germany. Contact via the contact form or the email address in the legal notice. No data protection officer has been appointed, as none is legally required.

2. Summary

• No cookies, nothing stored on your device (no local storage).
• No advertising, no tracking pixels, no profiling.
• Visitor statistics are cookieless and anonymous (section 5).
• No third-party embeds (no social media plugins, maps or videos).
• Fonts and program code are served from this website itself, not from third-party servers.

3. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (service “Cloudflare Workers”) and delivered through its network. When you visit, the host processes technical data your browser sends automatically:

• IP address
• date and time of the request
• page or file requested, amount of data transferred, status code
• browser type and version, operating system, referrer URL

The purpose is to deliver the website and keep it secure and stable (e.g. defending against attacks). Legal basis: Art. 6(1)(f) GDPR; my legitimate interest is a secure, working website. A data processing agreement under Art. 28 GDPR is in place. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision, Art. 45 GDPR), with Standard Contractual Clauses as an additional safeguard. Log data is kept only briefly by the host and not combined with other data.

4. Encryption

This website uses an encrypted connection (HTTPS), so data you send cannot be read by third parties.

5. Visitor statistics (Cloudflare Web Analytics)

To understand how many people visit the site, which pages they read and how fast the site loads, I use Cloudflare Web Analytics, provided by the host named in section 3. It sets no cookies, stores nothing on your device, does not use fingerprinting, and does not track you across websites or over time. A small script reports page views (page address, referrer, browser and device type, country derived from the IP address, load times); IP addresses are not stored for analytics. I only see aggregated figures. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring reach and improving the site). Because no information is stored on or read from your device for this purpose beyond what is technically required to load the page, no consent banner is used (§ 25 TDDDG). You can object at any time (section 10); blocking scripts in your browser also prevents it.

6. Contact form

When you send the contact form, your name, email address and message are transmitted in encrypted form to the form service Forminit (UXPLUS LTD, 86–90 Paul Street, London EC2A 4NE, United Kingdom), stored there and forwarded to me by email. For technical reasons the service also processes your IP address, browser details and an approximate location derived from it. According to the provider, data is stored on servers in Ireland (EU). A data processing agreement under Art. 28 GDPR is in place. For the United Kingdom there is an EU Commission adequacy decision (Art. 45 GDPR).

The purpose is to handle and answer your request. Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (my legitimate interest in answering enquiries). Providing the data is voluntary; without name, email and message I cannot reply.

I delete your request once it has been fully handled and no statutory retention obligations apply, at the latest after 12 months. I delete submissions in the form service regularly.

7. Contact by email

If you email me, I process your address and message to reply (Art. 6(1)(b) or (f) GDPR). My mailbox is provided by Google (Gmail); data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework. The “Copy email” button only copies the address to your clipboard locally; no data is sent to me or anyone else. Deletion as in section 6.

8. Links to Amazon and LinkedIn

This website contains plain links to Amazon (buying the book, reading a sample) and LinkedIn. These are not embeds: no data is sent to these providers unless you click a link. After clicking, the provider’s privacy policy applies. The links contain no affiliate or tracking parameters.

9. Retention

I keep personal data only as long as necessary for the purpose concerned or as required by statutory retention periods.

10. Your rights

You have the right to

• access your data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

An informal message via the contact form or email is enough to exercise your rights.

11. Right to lodge a complaint

You can complain to a data protection supervisory authority, for example the one responsible for me: Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.

12. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

13. Changes

I update this privacy policy when the website or the law changes. The version published here applies.