legal/privacy
Privacy Policy
Last updated: July 2026
The portfolio website uses no analytics, marketing, or advertising technologies. It sets only the technically necessary NEXT_LOCALE cookie to store the language preference.
1. Controller
2. Hosting & Server Logs
This website is hosted on a V-Server by STRATO AG (Pascalstraße 10, 10587 Berlin). For technical operation, the hosting provider and infrastructure may process technical connection data:
- IP address
- Date and time of access
- Requested URL
- Browser type and operating system
- Referrer URL
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and stable provision). The portfolio website keeps no first-party access logs. Infrastructure security and error logs are reviewed only when needed and overwritten through limited log rotation.
Strato's privacy policy: strato.de/datenschutz
Forgejo is also operated on the same server. Its additional data processing is described in section 3.
3. Forgejo (Private Code Hosting Instance)
I operate a private Forgejo instance at forgejo.nicojoerger.de. Public registration is disabled. For existing accounts enabled by me, account data (username, email address, and optional profile data), login data, session and security cookies, SSH or GPG keys, and user-provided content (for example repositories, issues, comments, attachments, and Actions logs) are processed.
Processing is necessary to provide and secure the service under Art. 6(1)(b) and (f) GDPR. Session and security cookies are required for sign-in, abuse prevention, and operation; no consent banner is required for these cookies. Account data and content are retained while the account or project exists and removed upon deletion unless statutory retention duties apply.
4. Contact via Email
When you contact me by email, the transmitted personal data (name, email address, message content) will be processed for the purpose of handling your enquiry. The legal basis is Art. 6 para. 1 lit. b or lit. f GDPR.
For email communication I use Google Mail (Gmail) by Google LLC. Google processes data under the Google privacy terms applicable to the account used; processing may take place in the United States. Google's privacy policy: policies.google.com/privacy
The data is deleted once it is no longer required for communication, unless statutory retention obligations apply.
5. External Links
This website links to external services (for example GitHub) and to Forgejo. When you click a link, your browser connects directly to that service, which receives at least your IP address and potentially referrer information. The respective service's privacy policy applies.
6. Technical & Organizational Measures (Art. 32 GDPR)
This website and Forgejo are transmitted over TLS/HTTPS. Access to the server infrastructure is limited to authorized persons. Forgejo uses private registration, limits email-address visibility, and processes only data required for the service.
7. Your Rights (GDPR Art. 15–21)
- ›Access to your stored data (Art. 15)
- ›Rectification of inaccurate data (Art. 16)
- ›Erasure of your data ('right to be forgotten', Art. 17)
- ›Restriction of processing (Art. 18)
- ›Data portability (Art. 20)
- ›Objection to processing (Art. 21)
- ›Withdrawal of consent with future effect (Art. 7(3))
- ›Complaint to the competent supervisory authority (Art. 77)
To exercise your rights, please contact: nico.joerger@gmail.com
Competent supervisory authority: The State Commissioner for Data Protection Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, Germany — baden-wuerttemberg.datenschutz.de