Privacy policy

Jonas Tebben

Email:

No data protection officer has been appointed, as none is required.

• no cookies except the login cookie for the download area (see below), no local storage
• no analytics or tracking services
• no ads
• no external fonts or CDNs
• no embedded third-party content; the Colbots trailer is hosted on the same server as the site

tones.tebben.dev has a password-protected download area for friends and testers. Only after a successful login does the server set a cookie (jbt_dl). It contains only an expiry date and a signature, no personal data, and is valid for 7 days. It is technically necessary so that you can download the files after logging in; no consent is required for it (Section 25(2) No. 2 TDDDG). The legal basis is Art. 6(1)(f) GDPR.

To prevent password guessing, the server counts failed logins per IP address in memory for 15 minutes. This count is not stored or evaluated.

All four sites are hosted by Railway Corporation, USA (railway.com). When you open a page, the hosting provider processes your IP address, date and time, the requested URL, the previously visited page (referrer), your browser’s user agent and the status code. This is necessary to deliver the site and to prevent abuse and attacks.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure, working website. My own server code writes no access logs. According to the provider, this data is stored only for a short time; I do not evaluate it.

This involves a transfer of data to the USA, based on the EU Standard Contractual Clauses in Railway’s data processing agreement (Art. 46(2)(c) GDPR).

Requests to tebben.dev without “www” are answered by Netlify, Inc., USA, which only forwards them to www.tebben.dev. The same data as for hosting is processed, on the same legal basis (Art. 6(1)(f) GDPR). The transfer to the USA is based on the EU Standard Contractual Clauses in Netlify’s data processing agreement.

If you send me an email, I use your data only to answer your request (Art. 6(1)(b) or (f) GDPR). I delete it once it is no longer needed for that purpose, unless statutory retention obligations apply.

Links to GitHub, LinkedIn, jonas-tebben.de or tellallyourfriends.de are plain links. Data is only transferred to the respective provider once you click them; their privacy policy then applies.

The JBT apps and plugins do not send any data to me.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Just send an email to the address above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany