Privacy
Controller
Johannes Rumpf
Barth-Arnoldi-Str. 62
61250 Usingen
Deutschland
info@fiducraft.eu
What this website does not do
No analytics, no advertising trackers, no contact forms and no embedded third-party content. Fonts and all other files are served from the same server. The interactive examples run only in your browser and transmit no input.
Hosting and server logs
The website is served from a server operated by the owner in Germany. When you visit, the web server processes technically necessary connection data: IP address, time, requested address, status code, amount of data transferred, referring page and browser identifier. The purpose is to deliver the page and to secure its operation, for example to detect attacks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is secure and stable operation. The web server logs are rotated and overwritten by size and deleted at the latest whenever the website is reinstalled.
Reverse proxy and attack detection
A reverse proxy runs in front of the web server on the same machine. It logs only failed requests (status codes 400–599) and requests that take 100 milliseconds or longer to answer, with the same connection data. Successful fast requests are not logged there. These logs are rotated daily and deleted after about 15 days, earlier in case of very high traffic. Security software evaluates these logs on the server and may automatically block IP addresses from which attacks originate for a limited time. Blocked IP addresses are transmitted, together with the time and type of the detected attack, to the provider of the security software, CrowdSec SAS in France. There they feed into a shared blocklist that operators use to protect each other against known attackers. The transfer takes place within the European Union. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is protection against attacks.
Language choice (cookie)
A manual language change stores the choice in the fiducraft_lang cookie for up to one year, solely to respect the selected language on your next visit. The cookie is strictly necessary for the service you explicitly requested (§ 25(2) no. 2 TDDDG); further processing is based on Art. 6(1)(f) GDPR. You can delete it in your browser at any time.
Contact by email
If you send an email, I process your details to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR. I delete the message once the enquiry is settled and no statutory retention obligations apply.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). An informal email to the address above is sufficient.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for the owner: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
No obligation to provide data
You are not required to provide any data. Without the technically necessary connection data, however, the website cannot be delivered. Apart from temporarily blocking conspicuous IP addresses to protect against attacks, there is no automated decision-making and no profiling.