1. Who is responsible
Dr. Oliver Elbracht, Am Entenschnabel 8, 59071 Hamm, Germany, honkiponkilabs@gmail.com. Honki Ponki Labs is the name under which I publish software.
2. The short version
This website uses no cookies, no analytics, no tracking and no advertising. Fonts and images are served from this site itself, so your browser contacts no other company when you read it. The one exception is the contact page: its spam check, Cloudflare Turnstile, loads from Cloudflare.
3. Hosting
The site is delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, as a processor on my behalf. To deliver the pages and protect them against attacks, Cloudflare necessarily processes technical request data: your IP address, the page requested, date and time, and your browser’s user-agent string.
Cloudflare may set a strictly necessary security cookie if it needs to tell people from bots; this site sets none itself. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in a secure, working website, and for any security cookie § 25(2) no. 2 TDDDG. Cloudflare is certified under the EU–US Data Privacy Framework. I do not keep my own access logs.
4. Contact form and email
If you use the contact form, your name (optional), email address and message are passed through this website’s server code at Cloudflare and delivered to me as an email. The website itself stores nothing.
To keep out automated spam, the form uses Cloudflare Turnstile. When the contact page loads, Turnstile runs a short check in your browser and processes technical data such as your IP address, browser and device characteristics and how the page was used, in order to tell people from bots. It uses no cookies for tracking or advertising. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in protecting the form from abuse. Cloudflare acts as my processor for both the form delivery and Turnstile.
If you email me or use the form, I process your address and message only to answer you. The legal basis is Article 6(1)(b) GDPR where your message concerns a contract, otherwise Article 6(1)(f) GDPR (answering enquiries). Email is handled by Google (Gmail). I delete closed conversations after twelve months at the latest, unless the law requires me to keep them longer.
5. Apps
Each app has its own privacy policy, linked from its page. For the Deutscher Einbürgerungstest app, see its privacy policy.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Articles 15–21 GDPR). Write to honkiponkilabs@gmail.com.
You can also complain to a data protection authority. The one responsible for me is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW). No automated decision-making or profiling takes place.