Skip to content
dbackhove.os

Privacy Policy

Last updated: October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Daniel Backhove
c/o Adressgeber #2302, An der Alten Ziegelei 38
48157 Münster
Email: info@danielbackhove.de

2. Hosting and server log files

This website is hosted on a server of Hetzner in Germany, operated by me via Coolify; Hetzner acts as my processor (Art. 28 GDPR). When you visit the site, the server infrastructure processes technical data such as IP address, date and time, requested page and browser information, as is usual for hosting (access logs of the upstream reverse proxy). The application logs of the website itself contain no IP addresses. Legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website).

3. Cookies, tracking and analytics

This website does not use tracking cookies and no analytics or advertising services. No data is passed on to third parties for these purposes.

4. Agent (AI assistant)

The website offers an optional agent that answers questions about my work. It is only used if you actively send a message. In that case your input is transmitted to Anthropic PBC (USA) via its API in order to generate the answer. Please do not enter sensitive or personal data. Conversations are not stored on this server; only technical figures such as message lengths and token counts are processed. Legal basis is Art. 6 para. 1 lit. a GDPR (your consent by sending the message) and lit. f GDPR. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework or the standard contractual clauses (Anthropic Data Processing Addendum). Further information: Anthropic privacy policy.

5. Abuse protection (ALTCHA and rate limiting)

To protect the agent and the contact form against abuse, ALTCHA is used. It is a proof-of-work challenge that runs on this server itself, sets no cookies and involves no third party. In addition, requests are limited per time window. For this purpose only a SHA-256 hash of your IP address, formed with a secret key and the date, is stored, not the IP address itself. The hashes are deleted at the latest one hour after the end of the respective calendar day (Europe/Berlin time zone). Legal basis is Art. 6 para. 1 lit. f GDPR (protection against abuse and cost control).

6. Contact by email

If you contact me by email, the data you provide will be processed to handle your request and deleted once it is no longer needed, unless statutory retention obligations apply.

7. Contact form

If you use the contact form, your name (optional), email address and message are processed to answer your request. The data is transmitted to me by email via the mail provider of danielbackhove.de (STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) and is not stored on the web server. It remains in the mailbox for as long as needed for the correspondence. To protect against abuse, ALTCHA is used as for the agent, and requests are limited per time window; only the hash of your IP address described in section 5 is used for this. Legal basis is Art. 6 para. 1 lit. b GDPR (steps prior to entering into a contract at your request), otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in answering enquiries).

8. Your rights

You have the following rights regarding your personal data:

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).