Legal

Privacy
notice

This notice explains what data is generated when you visit smstark-projekt.de, which services are involved and what rights you have.

Translation note: This English version is provided for convenience and has not been legally reviewed. The German version remains authoritative.

1. Controller

Simon Stark
Hamburger Straße 44
23730 Neustadt in Holstein
Germany

E-Mail: simonmstark@outlook.com

2. Hosting and server logs

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. When a page is requested, STRATO processes technical data so that the requested page can be delivered and the service can be secured.

This may include the IP address, date and time, requested file, amount of data transferred, referrer, browser type, operating system and access status. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website.

STRATO acts as a processor for hosting. According to STRATO's published information, log and temporary data are retained for a few days and, depending on the security and operational purpose, for no more than 60 to 90 days. Contractual or statutory duties may require longer retention in individual cases.

Further information: STRATO privacy information.

3. Contact by email and contact form

If you contact me by email, I process the sender address, the content of the message and any other information you choose to provide. The data is used to answer the request.

The contact form on the home page asks for your name, email address and message. The submission is handled by Web3Forms or Web3Creative. Technical log data such as the IP address, browser type and time of submission may also be processed.

According to its own information, Web3Forms works with Amazon Web Services, Cloudflare and Hetzner. The service is operated from India. For transfers outside the European Economic Area, Web3Forms names the EU standard contractual clauses as a safeguard. According to the provider, form data may be stored for up to three years unless deleted earlier.

For spam prevention, Web3Forms may also send the IP address and email address to CleanTalk or Akismet.

The legal basis is Art. 6(1)(b) GDPR where the request concerns a specific enquiry or pre-contractual communication. For general messages, Art. 6(1)(f) GDPR applies. The legitimate interest is to process and document the enquiry.

Further information: Web3Forms privacy notice.

4. Local browser data in the tools

The nutrition tool stores inputs and settings in your browser's local storage. This includes changes to the food database, profile details and manually changed minimum and maximum values. The keys currently include ie_foods_v11, ie_profile_v2 and ie_req_v4.

This data remains on your device. The tool does not send it to me or to STRATO. You can remove the entries using the tool's reset functions or by deleting website data in your browser. They are not automatically available in another browser or on another device.

Local storage is required to restore the configuration you explicitly chose the next time you open the tool. It is therefore used under Section 25(2)(2) TDDDG without additional consent. Where the GDPR applies, processing is based on Art. 6(1)(b) or (f) GDPR.

Please do not enter information that you do not want to store locally on your device. This applies especially to information about your body, nutrition and health.

5. Google Fonts

Several pages load the fonts “Syne”, “DM Sans” and, in some places, “Playfair Display” from Google Fonts. When a page is opened, the browser connects to Google's servers. Google receives, in particular, the IP address, browser information, time and requested resource.

The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the United States is possible. Google may rely on the EU-US Data Privacy Framework and, in addition, standard contractual clauses.

The integration provides a consistent visual presentation. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is a readable and consistent design. You can prevent the connection by blocking external fonts in your browser; the website remains readable with a fallback font.

Further information: Google privacy policy.

6. Chart.js via external content delivery networks

The FIRE and Kelly dashboards load Chart.js via jsDelivr or cdnjs from Cloudflare. This library draws the charts in the browser. When the file is loaded, technical connection data, in particular the IP address, browser data, time and requested resource, is transmitted to the relevant CDN provider.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is reliable delivery of the program file needed for the charts. Processing in countries outside the European Economic Area cannot be ruled out.

8. Cookies, analytics and advertising

I do not use my own analytics or advertising services and do not create user profiles. As far as currently known, the website does not use its own tracking cookies. Technically necessary storage and the service-provider connections described above are unaffected.

9. Retention period

I store personal data only for as long as it is needed for the relevant purpose. Contact enquiries are deleted after processing is complete unless statutory retention duties or legitimate reasons require further storage. The periods used by external providers are described in the relevant sections.

10. Your rights

Subject to the statutory requirements, you have the following rights:

  • Access to the personal data processed, under Art. 15 GDPR
  • Rectification of inaccurate data, under Art. 16 GDPR
  • Erasure, under Art. 17 GDPR
  • Restriction of processing, under Art. 18 GDPR
  • Data portability, under Art. 20 GDPR
  • Object to processing, under Art. 21 GDPR
  • Withdraw consent for the future, under Art. 7(3) GDPR

To exercise your rights, send an email to simonmstark@outlook.com.

You may also lodge a complaint with a data-protection supervisory authority under Art. 77 GDPR. This is generally the authority in your place of residence, your place of work or the place of the alleged infringement.

Independent State Centre for Data Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, www.datenschutzzentrum.de

11. Encryption and automated decisions

The published website is intended to be served exclusively over HTTPS. This encrypts data in transit. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

12. Status and changes

Status: 25 July 2026

This privacy notice will be updated if services, functions or statutory requirements change.