hs@lab:~$ cat privacy.md

Privacy Policy

This is a convenience translation. The legally binding version is the German Datenschutzerklärung.

1. Privacy at a glance

This website is deliberately minimal. It sets no cookies, embeds no analytics or tracking services, loads no fonts from external servers and contains no contact form. The only JavaScript on this website is a single file served by us: it plays a short opening animation on the first visit to the home page, animates the project folders opening and closing, and provides a small command line in the sidebar for browsing the page. It runs entirely in your browser, sends nothing and stores nothing beyond the session value described in section 5. Personal data is therefore only processed where it is technically unavoidable — when our host delivers the page — or where you actively write to us.

2. Controller

The controller responsible for data processing on this website is:

3. Hosting

This website is hosted by an external service provider:

When you access the website, the host automatically collects information transmitted by your browser (server log files). This is typically:

• IP address of the requesting device
• date and time of access
• the file requested and the address of the page retrieved
• amount of data transferred and notification of successful retrieval
• browser type, browser version and operating system
• where applicable, the previously visited page (referrer)

This data is required for the technically correct delivery and the security of the website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and reliable operation of the website. We do not merge this data with other data sources and do not evaluate the log files on a personal basis.

As the host is based in the USA, a transfer of personal data to a third country cannot be ruled out. We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR. The transfer is additionally based on the European Commission's standard contractual clauses.

4. Fonts

This website uses the typeface JetBrains Mono. It is served locally from our own server. There is no connection to Google Fonts or any other external font service, and no data is transferred to third parties in the process.

5. Cookies, analytics and tracking

This website uses no cookies. No analytics, statistics or tracking services are used, no profiling takes place, and no local storage is used. A cookie banner is therefore not required.

The home page plays a short animation on your first visit. So that it does not repeat on every navigation, a single technical value (hs-intro) is written to your browser's session storage. It contains no personal data, allows no recognition, never leaves your device, and is deleted automatically when you close the browser tab. The legal basis is § 25 (2) no. 2 TTDSG, as it serves solely to present the page you requested as designed. If you have “reduce motion” enabled on your system, the animation — and with it the storage — does not happen at all. The sidebar command line and the colour-scheme switch it offers store nothing; what you type there is neither stored nor transmitted.

6. Contact by email

If you write to us by email, your details — including the contact data you provide — are stored by us for the purpose of processing the enquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures, and Art. 6 (1) (f) GDPR in all other cases (legitimate interest in handling enquiries). We do not pass this data on without your consent. It is deleted once your enquiry has been dealt with and no statutory retention periods apply.

7. External links

This website links to external offerings, including bundestakt.de, parlance-ai.de, kiwi4you.de, GitHub, the company's LinkedIn page and the operators' LinkedIn profiles. External links open in a new browser tab. These are plain hyperlinks — no plugins or content from these providers are embedded. Data is only transmitted to the respective provider once you click such a link. The respective provider is responsible for data processing on the linked pages.

8. Your rights

Within the scope of the statutory provisions, you have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent with effect for the future

To exercise these rights, contact kontakt@hegemann-schorsch.de.

Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.

9. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser's address bar switching from “http://” to “https://”.

10. Changes to this policy

We update this privacy policy whenever data processing on this website changes. Last updated: September 2026.