~/privacy
Privacy
Courtesy translation. Only the German version is legally binding.
1. Controller
The controller for data processing on this website is José Magliarisi, Gelbehirschstraße 10, 60313 Frankfurt am Main, Germany, jose@lenskiz.com, +49 162 7072072. There is no data protection officer, as none is required.
2. In brief
- This website uses no cookies and no tracking.
- It loads nothing from third-party servers. Fonts, images and scripts come from lenskiz.com.
- Settings you choose stay in your browser.
- The site is delivered via Cloudflare, which processes technically necessary access data.
3. Visiting the website and hosting
The website is delivered via Cloudflare’s network (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). With every request, Cloudflare processes data that your browser sends automatically:
- IP address
- date and time
- requested address and referring page (referrer)
- browser, operating system and preferred language
The purpose is to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure and fast website. From this data, Cloudflare compiles aggregated figures, such as the number of visits per country. I cannot identify individual visitors in them.
Cloudflare acts on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to the USA in the process. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and these transfers are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). I do not store access logs myself. How long Cloudflare retains data for security purposes is set out in Cloudflare’s privacy policy.
The website itself sets no cookies. If Cloudflare suspects an attack and requires a check in the browser, it may set a technically necessary cookie (“cf_clearance”). The legal basis for this is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(f) GDPR.
4. Language selection
If you open lenskiz.com without a language path, you are redirected to the German, English or Spanish version based on your browser’s language setting. The setting is only read for this purpose and is not stored. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is to show you the site in your language.
5. Settings in your browser
In the command palette you can change the color scheme, language, motion, glyph set and similar options. Your browser stores your choice in local storage (localStorage, entries starting with “lz-”) so that it applies on your next visit. These entries stay on your device and are not transmitted to me or anyone else. Storing them is strictly necessary to provide the setting you explicitly requested (Section 25(2) No. 2 TDDDG). You can delete them at any time in your browser settings (“clear site data”).
6. Contact
If you contact me by email, phone or WhatsApp, I process your details, such as your name, contact information and message, in order to reply. If your enquiry concerns a contract or steps prior to entering into one, the legal basis is Art. 6(1)(b) GDPR; otherwise it is Art. 6(1)(f) GDPR (legitimate interest in replying). I delete the details once the enquiry has been dealt with, unless statutory retention obligations apply.
Emails to jose@lenskiz.com are processed on my behalf by Google Ireland Limited (Google Workspace). Data may be transferred to Google LLC in the USA in the process. Google LLC is certified under the EU-U.S. Data Privacy Framework, and these transfers are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).
The “WhatsApp” link opens the service of WhatsApp Ireland Limited. Nothing from WhatsApp is embedded on this website: data is only sent to WhatsApp when you use the link. WhatsApp’s privacy notice then applies.
7. Links to projects
The site links to my projects, some on subdomains of lenskiz.com, some on other websites. Their own privacy notices apply there.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to jose@lenskiz.com is enough.
Right to object: Where I process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wilhelmstraße 7, 65185 Wiesbaden, Germany.
9. Other information
You are not obliged to provide any data. Without the technical access data described in section 3, however, the website cannot be displayed. There is no automated decision-making and no profiling (Art. 22 GDPR).
Last updated: 2026-10-14