Last updated: March 2026
1. Who Is Responsible
Carsten Christiani
E-mail: [email protected]
Website: christiani.com
I am the data controller for this website within the meaning of the EU General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG).
2. Applicable Law
This website is operated by a person based in both the Netherlands and Germany, with tax and business registration in Germany. Data processing is governed by the GDPR as applicable in both countries, and additionally by the German BDSG (Bundesdatenschutzgesetz) and the Dutch UAVG (Uitvoeringswet AVG).
3. What Data Is Collected and Why
Server logs
When you visit this site, the web server (hosted by Lightningbase) automatically logs: your IP address, browser type, operating system, referring URL, pages visited, and date/time of access. These logs are retained for up to 14 days for security and diagnostic purposes. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure website.
Contact enquiries
If you contact me by e-mail, I store your name, e-mail address, and the content of your message to handle your enquiry. I do not share this data with third parties. Retention: until the matter is resolved and no ongoing relationship exists. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in responding).
Images
Images on this site are optimised by ShortPixel, a service provided by Shorpixel SRL (Romania). Image files may be transmitted to ShortPixel servers for compression. ShortPixel processes images on a task basis and does not retain them beyond the compression process. See shortpixel.com/privacy.
Newsletter subscription
If you subscribe to the newsletter via the form on this site, I collect your e-mail address for the purpose of sending you periodic updates. Subscription is by double opt-in: you receive a confirmation e-mail, and your subscription is only activated once you confirm it.
Your e-mail address is processed by Kit (ConvertKit, LLC), 750 N. San Vicente Blvd, West Hollywood, CA 90069, USA. Kit transfers data outside the EEA on the basis of Standard Contractual Clauses. See kit.com/privacy. I do not share your address with any other third party.
Legal basis: Art. 6(1)(a) GDPR (consent, given at sign-up). You may withdraw consent at any time by clicking the unsubscribe link in any e-mail, or by writing to [email protected]. Retention: until you unsubscribe, after which your address is deleted from Kit within 30 days.
4. Cookies
This site uses only technically necessary cookies set by WordPress (session management, login state, editor preferences). No tracking, analytics, or advertising cookies are used. See the Cookie Policy for details.
5. Hosting
This website is hosted by Lightningbase (US-based infrastructure). By visiting this site, your data may be processed on servers outside the EU/EEA. Lightningbase maintains standard contractual clauses and appropriate safeguards under Art. 46 GDPR.
6. Your Rights
Under the GDPR and BDSG, you have the right to: access your personal data (Art. 15 GDPR); correction of inaccurate data (Art. 16); erasure under certain conditions (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); and to object to processing based on legitimate interest (Art. 21).
To exercise any of these rights, contact me at [email protected]. I will respond within 30 days.
7. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Germany, the competent authority is the Landesbeauftragter für den Datenschutz of the Bundesland where the controller is based (details at bfdi.bund.de). In the Netherlands: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Data Retention
Personal data is retained only as long as necessary for the purpose for which it was collected, or as required by German commercial and tax law (HGB, AO — typically 6–10 years for business correspondence and invoicing records).
9. Changes
I may update this policy as the site evolves. The date at the top indicates the last revision. Continued use of the site after a change constitutes acceptance of the updated policy.