Privacy

Last updated: 3 November 2026

This is a personal website. It sets no cookies, uses no analytics or tracking, embeds no third-party content and loads no external fonts or scripts. The only personal data involved is described below.

Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:
Jakob von Gehlen
Moorreye 124
22415 Hamburg, Germany
Email: (enable JavaScript to see the address)

Hosting and server logs

The site is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. When you visit, your browser sends technical data that GitHub processes to deliver the site and keep it secure:

your IP address
date and time of the request, and the page requested
browser type and version, operating system, and the referring page

I do not receive or look at these logs. The legal basis is Art. 6(1)(f) GDPR: there is a legitimate interest in delivering the website reliably and protecting it against abuse. GitHub may process this data in the USA. GitHub, Inc. is certified under the EU–U.S. Data Privacy Framework, on which transfers are based (Art. 45 GDPR). See GitHub's privacy statement.

Contacting me

If you email me, I use your email address and the content of your message only to reply. The legal basis is Art. 6(1)(f) GDPR (answering your enquiry), or Art. 6(1)(b) GDPR where your message concerns a contract or pre-contractual steps. I delete the correspondence when it is no longer needed, unless I have to keep it by law.

Links to other sites

This site links to external sites such as GitHub and LinkedIn. Nothing is sent to them until you click a link; after that, their own privacy policies apply.

Your rights

You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). To use any of these, email me at the address above.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the Hamburg Commissioner for Data Protection and Freedom of Information, the Dutch Autoriteit Persoonsgegevens, or the authority in the EU country where you live.

No automated decisions

No automated decision-making or profiling takes place.

Changes

I will update this notice if the site changes, for example if analytics or a contact form are added.