Back to Home

Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Tobias Wosowiecki
Ansbacher Straße 68
10777 Berlin, Germany
Email: hello@tobias-wosowiecki.de
Phone: +49 176 25226243

2. General Information on Data Processing

I take the protection of your personal data very seriously and follow the principle of data minimisation: I collect only what is needed to run this website and to understand, in aggregate, how it is used. This website uses no advertising, no third-party analytics services (such as Google Analytics), no tracking cookies, and no IP-based geolocation lookups. Browsing this website is generally possible without actively providing personal data.

3. Hosting and Processors

This website is operated on infrastructure provided by the following service providers, who act as processors on my behalf (Art. 28 GDPR). Personal data is processed only to provide the website and the functions described in this policy:

  • Application hosting: Fly.io (Fly.io, Inc., USA), with the servers serving this website located in Frankfurt am Main, Germany.
  • Database: Supabase (Supabase, Inc.), with the database hosted in the EU (Ireland), used to store the website's content and the analytics and contact data described below.
  • Email dispatch: Resend (Resend, Inc., USA), used solely to deliver transactional emails (e.g. a confirmation of your contact request or a requested result by email).

Where a processor is based outside the EU/EEA, the transfer is safeguarded by the European Commission's Standard Contractual Clauses. The legal basis for using these providers is Art. 6 (1) lit. f GDPR (legitimate interest in the secure and reliable operation of the website).

4. Server Log Files

When you access this website, the hosting provider automatically collects and stores information that your browser transmits. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • IP address
  • Time of the server request

This processing is technically necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in the technically error-free presentation and security of the website).

5. Cookies and Local Storage

This website does not set any tracking or advertising cookies, and no third-party cookies. It does, however, use your browser's local storage (localStorage and sessionStorage) for a small number of first-party purposes. Local storage is not a cookie and is not transmitted automatically with every request; the entries below stay on your device until they expire or you clear them:

  • Display preference (theme): remembers whether you chose light or dark mode.
  • Reach-measurement identifiers (tw_vid, tw_sid): a random, pseudonymous visitor ID and a 30-minute session ID, used for the first-party analytics described in section 6. They are stored in sessionStorage and are cleared at the end of your browser session — there is no persistent, cross-session identifier. They contain no name, email or IP address and are not shared with any third party.
  • Referral de-duplication (ref_tracked, sessionStorage): prevents a referral visit from being counted twice; cleared automatically when you close the browser tab.

You can delete these entries at any time via your browser settings. The display preference is technically necessary for the function you requested; the reach-measurement identifiers are set on the basis of Art. 6 (1) lit. f GDPR (see section 6), and you can object to them as described there.

6. Reach Measurement (First-Party Analytics)

To understand how this website is used and to improve its content, I operate my own, self-hosted analytics. No third-party analytics service is involved, and no data is sold or shared for analytics or advertising. Two complementary sets of data are recorded:

  • Page-level data: the page visited, language, referrer, anonymised device/browser/operating-system type, screen size, any campaign parameters (UTM), the time of the visit, and your IP address. From the time zone reported by your browser, a coarse country is derived (e.g. “Germany”). No IP-based geolocation and no third-party lookup is performed — neither your city nor your provider/organisation is determined or stored.
  • Behavioural data: tied only to the pseudonymous identifiers from section 5 (tw_vid/tw_sid, no IP address), this records scroll depth, time actively spent on a page, whether an article was read to the end, anonymised click positions (to build aggregate “heatmaps”), and interactions with on-page elements.

The legal basis is Art. 6 (1) lit. f GDPR. My legitimate interest is to measure the reach of my content and to improve this website on the basis of aggregated, statistical insight. You have the right to object to this processing at any time (Art. 21 GDPR) — see section 11. The identifiers already reset with every new browser session; in addition, you can stop the behavioural measurement entirely by clearing this site's storage in your browser or by using your browser's content-blocking features.

7. Referral-Tracking

If you reach this website via a link containing a referral parameter (e.g. ?ref=source), the following is recorded once and stored server-side in my database: the referral parameter (the source), the page visited, your browser identification (user agent), your IP address, and the time of access. The browser's sessionStorage API is used to avoid double-counting within a session; this entry is deleted when the browser session ends. This data is not shared with third parties.

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in understanding the origin of visitors in order to evaluate my own outreach).

8. Contact Form and Contact by Email

If you use the contact form or contact me by email, the data you provide (such as your name, company, email address and your message), together with your IP address and the time of submission, is processed to handle your enquiry. A copy is delivered to me by email via the processor named in section 3 (Resend).

The legal basis is Art. 6 (1) lit. b GDPR where the enquiry relates to a (prospective) contract, and otherwise Art. 6 (1) lit. f GDPR (legitimate interest in responding to enquiries). The data is stored for as long as needed to handle your enquiry and any follow-up, and is then deleted unless statutory retention periods apply.

9. Interactive Tools and Result Emails

This website offers optional interactive tools (such as the “Innovation Mirror”). You can use them without registering. If you choose to have your result or further information sent to you by email, I process the email address you enter together with the answers you provided. Your email address is only used for this purpose after you have confirmed it via a confirmation email (double opt-in).

The legal basis is your consent under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future, for example by sending a short message to the contact address below; the withdrawal does not affect the lawfulness of processing carried out before it. Emails are delivered via the processor named in section 3 (Resend).

10. Fonts

The main website uses standard system fonts that are already installed on your device; no external font service is contacted. Only the online reading view of the magazine additionally loads a font via Google Fonts (provided by Google Ireland Limited / Google LLC). When that view is opened, your browser connects to Google's servers, which makes your IP address known to Google. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a consistent presentation in the reading view). More information: https://policies.google.com/privacy.

11. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interest (Art. 21 GDPR)
  • Right to withdraw consent at any time, with effect for the future (Art. 7 (3) GDPR)

12. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent supervisory authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
www.datenschutz-berlin.de

13. Contact for Privacy Inquiries

To exercise your rights or for any questions about data protection, you can reach me at:

Email: hello@tobias-wosowiecki.de
Phone: +49 176 25226243

14. Currency and Changes to this Privacy Policy

This privacy policy is valid as of June 2026. As this website develops further, or in response to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.

HomeImpressum