Privacy
Last updated: 23 August 2026
Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
Clyston Mill Consulting
Benedict Wolff
c/o Simon Wolff | translate.berlin
FIREWORKS
Stockholmer Straße 4
13359 Berlin Germany
Email: hi@bjpw.me
What this website does with your data
This is a personal website. It has no user accounts, no registration, no newsletter and no advertising. The processing described below is limited to what is necessary to deliver the pages to you and to answer messages you choose to send.
Hosting and server log files
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, acting as my processor under a data processing agreement.
When you load a page, the server automatically records the information needed to deliver it and to keep the service secure and working:
- IP address
- date and time of the request
- the page or file requested
- referring page, where transmitted by your browser
- browser type and version
- operating system
- status and error information
This data is not combined with other sources and is not used to identify you.
Legal basis: Art. 6 (1) sentence 1 lit. f GDPR. My legitimate interest is the secure, reliable delivery of the website.
Retention: the server log files are held by IONOS, which states that log and temporary data are kept for periods ranging from a few days up to a maximum of 90 days, depending on operational and security requirements. They are then deleted or anonymised.
Website statistics
I use IONOS SiteAnalytics, the analytics function included with my hosting, to see which pages are visited and how the site performs technically. It runs only if you have accepted it in the consent banner.
The service records:
- the referring website
- the page or file requested
- browser type and version
- operating system
- device type
- the time of access
- your IP address in anonymised form, used only to establish the approximate location of the request
The service works by loading a JavaScript file from cdn.pagepulse.info, which then requests a one-pixel image from api.pagepulse.info. That request carries the address of the page you are viewing, the referring website, and the information your browser sends with any request, including your IP address. Both domains are operated by IONOS and resolve to servers in Germany. The service sets no cookies and stores nothing on your device. The results are statistical. I do not build profiles, do not identify individual visitors, and do not use the data for advertising.
Service provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Processing takes place in Germany and the European Union.
Legal basis: Art. 6 (1) sentence 1 lit. a GDPR, and § 25 (1) TDDDG.
Retention: the collected data is stored for eight weeks and then deleted automatically.
You can withdraw your consent at any time via the privacy settings on this website, with effect for the future.
IONOS privacy policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung/
Translation function
The website offers a function that translates page content into other languages. It is loaded only after you have consented via the banner. When you use it, the text of the page and your technical connection data, including your IP address, are transmitted to the provider to generate the translation.
Service provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
Legal basis: Art. 6 (1) sentence 1 lit. a GDPR, and § 25 (1) TDDDG for the storage of and access to information on your device.
You can withdraw your consent at any time via the privacy settings on this website, with effect for the future.
Cookies and consent management
Until you make a choice in the banner, this website stores nothing on your device and sets no cookies.
When you accept or decline, your choice is saved in a cookie named gox_cookie_consent, which lasts 30 days and contains only a list of the services you have accepted. It holds no identifier for you and no record of the time. You can change or withdraw your choice at any time via the privacy settings on this website; withdrawing also removes the data stored by the service concerned.
This consent cookie is strictly necessary to provide a function you have expressly requested, so it does not itself require consent under § 25 (2) no. 2 TDDDG. The associated processing rests on Art. 6 (1) sentence 1 lit. f GDPR, my interest in respecting and remembering your choice.
It is the only cookie this website uses. Neither IONOS SiteAnalytics nor any other service on this site stores information on your device.
Any further storage on your device results from the services described above and occurs only if you accept them.
Contacting me by email
If you write to hi@bjpw.me, I process your email address, your name if you give it, the content of your message and any attachments, in order to reply and to deal with any follow-up.
Legal basis: Art. 6 (1) sentence 1 lit. b GDPR where your message concerns a contract or steps taken before entering into one; otherwise Art. 6 (1) sentence 1 lit. f GDPR, my legitimate interest in answering messages sent to me.
Retention: correspondence is deleted once the matter is closed and no further exchange is expected, at the latest after six months. Where the exchange becomes part of a contractual relationship, statutory retention periods under German commercial and tax law apply instead — generally six, eight or ten years depending on the document.
Email is transmitted over the internet with transport encryption where the mail servers involved support it. That is not end-to-end encryption, so the providers handling the message can technically access its contents.
My mailboxes are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS also filters incoming mail for spam and malware.
Recipients and transfers
Apart from IONOS as my hosting, email and analytics provider, personal data from this website is not passed to third parties.
The hosting and analytics services described above run on servers in Germany. IONOS reserves the right to transfer data to countries outside the EU and EEA where necessary, and undertakes in such cases to put in place the safeguards required by Chapter V GDPR. I do not myself transfer any data from this website outside the EU/EEA.
Where a matter raised by email leads to an engagement, data may be passed to my tax adviser or, if a claim arises, to legal advisers — on the basis of Art. 6 (1) sentence 1 lit. c and lit. f GDPR.
Your rights
Under the GDPR you have the right to obtain access to the personal data I hold about you (Art. 15), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to have processing restricted (Art. 18), to receive data you provided in a portable format (Art. 20), and to object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21). Where processing rests on your consent, you can withdraw it at any time with effect for the future (Art. 7 (3)); this does not affect the lawfulness of what was done beforehand.
To exercise any of these, write to hi@bjpw.me.
You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
Security
The website is served over HTTPS using TLS encryption, so that information passing between your browser and the site is protected in transit. I take further technical and organisational measures appropriate to the risk, taking into account the state of the art and the nature and scope of the processing.
Changes
I update this policy when changes to the website, its service providers or the law make that necessary. The version published here is the current one.