Privacy policy

This policy describes which personal data is processed when you visit fhu-it.de and what I do with it. In short: the website sets no cookies, loads no content from third-party servers and uses no analytics, advertising or social media services.

The German version of this policy is the legally binding one.

Controller

Frank Humpfle

Loki-Schmidt-Platz 25

22297 Hamburg

Germany

Email: fhu-it@humpfle.com

Phone: +49 152 21914890

1. Visiting the website and server logs

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Falkenstein data centre in Germany. Hetzner processes the data on my behalf under a data processing agreement (Art. 28 GDPR).

Each time a page is requested, the web server automatically stores:

  • your IP address,
  • the date and time of the request,
  • the requested address and the status code of the response,
  • the amount of data transferred,
  • the page you came from (referrer), if your browser sends it,
  • the identifier of your browser and operating system (user agent).

A website cannot be delivered without this data. I also use it to detect and fend off faults and attacks. The legal basis is my legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The logs are deleted automatically after 14 days. They are not analysed for statistical or advertising purposes and are not combined with other data.

The connection to the website is encrypted (HTTPS).

2. No cookies, no third-party content

The website stores nothing on your device: no cookies, no local storage. Fonts, scripts, images and videos are served exclusively from my own server; when a page loads, no data is passed to third parties such as Google or providers of fonts and content delivery networks. There are no visitor statistics, no tracking and no embedded social media content.

The website contains links to other websites, for example to humpfle.com. Only when you follow such a link does the operator of the target site process your data, under their own privacy policy.

3. Contact by email or phone

When you write to me or call me, I process the information you provide, usually your name, email address or phone number and the content of your enquiry, in order to answer it. If it concerns an order or its preparation, the legal basis is Art. 6(1)(b) GDPR, otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Providing the information is voluntary; without contact details, however, I cannot reply to you.

My email inbox is operated by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and processed by Google on my behalf (Art. 28 GDPR). A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).

I delete your enquiry once it has been dealt with. This does not apply to documents I have to keep for commercial or tax reasons: business letters for six years, accounting records for ten years (§ 257 HGB, § 147 AO; Art. 6(1)(c) GDPR).

4. Your rights

You have the right to

  • access the data I process about you (Art. 15 GDPR),
  • have incorrect data rectified (Art. 16 GDPR),
  • have your data erased, unless there is a legal obligation to keep it (Art. 17 GDPR),
  • restrict processing (Art. 18 GDPR),
  • receive the data you have provided to me in a common, machine-readable format (Art. 20 GDPR),
  • object to processing (Art. 21 GDPR, see below).

An informal message to fhu-it@humpfle.com is all it takes.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

Right to object under Art. 21 GDPR: Where I process data on the basis of my legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

There is no automated decision-making, including profiling (Art. 22 GDPR).

Last updated: October 2026