Privacy policy

Last updated: September 2026

This English version is provided for convenience. The German Datenschutzerklärung is legally binding.

1. Controller

[First name Last name]
[Company name, if applicable]
[Street and number]
[Postcode and city]
Email: tim@timwessels.net

2. Summary

This website is deliberately built to process as little data as possible. There are no cookies, no tracking and no analytics tools. Fonts and preview images are served from my own server. Personal data is only processed when this is technically necessary or when you take action yourself, for example by sending the contact form or starting a YouTube video.

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is located in Germany. A data processing agreement in accordance with Art. 28 GDPR is in place with Hostinger.

When you visit the site, the server automatically processes data that your browser transmits (server log files):

  • IP address
  • date and time of access
  • requested page or file and amount of data transferred
  • status code (for example, whether the page was found)
  • the previously visited page (referrer), if transmitted
  • browser type, browser version and operating system

This is necessary to deliver the site and to ensure its security and stability, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely and without errors. The log files are only stored for as long as necessary for these purposes and are then deleted. You can find more about data processing by Hostinger in Hostinger's privacy policy.

The connection to this website is encrypted via TLS. You can recognize this by the lock icon and “https://” in your browser's address bar.

4. Cookies and local storage

This site does not set any cookies. Only if you select “Always play YouTube videos directly” when playing a video does the site store this choice in your browser's local storage (localStorage). This is strictly necessary so the site can remember your choice (Section 25(2) No. 2 TDDDG). The information never leaves your device. If you choose “Light” or “Auto” instead of the default dark design in the footer, this setting is stored there too, so it is kept on your next visit. Choosing “Dark” removes it again.

5. Contact form and email

If you write to me using the contact form, I process your details: name, email address, topic, message and, if provided, the address of your website. The form is processed directly on my server at Hostinger and forwarded to my inbox as an email. No external form service is used, and the message is not stored on the web server.

The purpose is to handle your request. If your request relates to a contract, for example a web design request, the legal basis is Art. 6(1)(b) GDPR. In all other cases it is Art. 6(1)(f) GDPR, my legitimate interest in answering inquiries. The same applies if you email me directly.

Spam protection: To prevent misuse, the server briefly stores a hash of your IP address (a checksum that cannot be reversed) together with the time of sending. The entries are deleted after one hour, at the latest the next time the form is sent, and the key used is renewed daily. The legal basis is Art. 6(1)(f) GDPR.

I delete messages once your request has been fully handled and no statutory retention obligations apply, for example for business correspondence (up to 6 years under Section 257 HGB) or tax-relevant documents (up to 10 years under Section 147 AO). Providing the information in the form is voluntary. Without a name, email address and message, however, I cannot reply to you.

The message is transferred to my email inbox in encrypted form (TLS). The inbox is provided by SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain. A data processing agreement in accordance with Art. 28 GDPR is in place with SiteGround.

6. YouTube videos

On this site you can watch videos from my YouTube channel. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded when you click “Play video”. Before that, no data is transferred to YouTube, because the preview images are stored on my own server.

After your click, a connection to YouTube is established. I use the privacy-enhanced mode (youtube-nocookie.com). Even so, YouTube may process data such as your IP address, information about your browser and device and the page you are visiting, and may store or read information on your device. If you are logged in to YouTube or Google, YouTube can link the playback to your account.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give with your click. You can withdraw it at any time with effect for the future by resetting the stored permission above under “Cookies and local storage”.

Google may also transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework. An adequacy decision of the European Commission applies to certified companies (Art. 45 GDPR). Learn more in Google's privacy policy.

7. Updating the video list

So that new videos appear on the site automatically, my server regularly retrieves the public video feed of my YouTube channel and stores titles, publication dates and preview images on the server. No data about you is transferred to YouTube in the process.

This site contains links to other providers, for example YouTube or Hostinger. Simply viewing the site does not transfer any data. Only when you click a link do you leave my site, and the privacy policy of the respective provider applies.

Links to Hostinger are affiliate links. When you click one, a tracking link from the affiliate program (hostg.xyz) redirects you. Hostinger may record that you came via my site, for example using cookies, so that a commission can be attributed. This processing takes place on Hostinger's websites. I do not receive any data that would allow me to identify you.

9. Fonts

The fonts are hosted locally on my server. No connection is made to Google Fonts or other font providers.

10. Your rights

You have the right at any time to:

  • access your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)
  • lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in your country or federal state

Right to object (Art. 21 GDPR): If I process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. Just send me an email.

No automated decision-making or profiling takes place.