Privacy Policy

Last updated: March 10, 2026

This privacy policy explains how Hans Christoph Luther (“I”, “me”) collects, uses, and protects your personal data when you visit hansluther.com (the “Website”). I’m based in Berlin, Germany, and this policy complies with the EU General Data Protection Regulation (GDPR).

Data Controller

Hans Christoph Luther
10997 Berlin, Germany
Email: [email protected]

What Data I Collect

Contact Form Submissions

When you submit the contact form on this Website, I collect:

  • Your name
  • Your email address
  • Your message content

This data is collected based on your consent (Art. 6(1)(a) GDPR) and my legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).

Server Logs

When you visit this Website, the hosting provider automatically collects standard server log data, which may include your IP address, browser type, referring page, and the date and time of your visit. This is necessary for the operation and security of the Website (Art. 6(1)(f) GDPR).

No Tracking or Analytics Cookies

This Website does not use tracking cookies, advertising cookies, or third-party analytics services. No data is shared with advertisers or data brokers.

How I Use Your Data

  • Contact form data is used solely to respond to your inquiry. I do not add you to any mailing list or use your information for marketing purposes.
  • Server logs are used for security monitoring and to ensure the Website functions properly.

Data Storage and Retention

Contact form submissions are retained only as long as necessary to respond to your inquiry and for any reasonable follow-up, after which they are deleted. Server logs are retained according to the hosting provider’s standard retention period, typically no longer than 30 days.

Third-Party Services

  • Hosting provider — This Website is hosted by a third-party provider that may process server log data on my behalf.
  • Formspark — Contact form submissions are transmitted via Formspark (formspark.io), operated by Trampoline Software SRL (Ghent, Belgium). Formspark processes your name, email address, and message content in order to deliver the submission to me. As with any web request, Formspark also receives standard HTTP metadata such as your IP address, User-Agent, Referer, and other request headers. Formspark hosts its infrastructure in Ireland (EU) and performs server-side spam filtering on all submissions. Formspark offers a Data Processing Agreement (DPA) upon request. For details on their data practices, see the Formspark Privacy Policy.
  • Botpoison — The contact form uses Botpoison (botpoison.com) for invisible anti-spam protection. When you submit the form, Botpoison runs a brief proof-of-work challenge in your browser. No personal data is collected or transmitted to Botpoison — only the cryptographic solution is sent alongside your submission for verification by Formspark. For details, see the Botpoison Privacy Policy.

Your Rights Under GDPR

As an EU resident, you have the right to:

  • Access the personal data I hold about you
  • Rectify inaccurate or incomplete data
  • Erase your personal data (“right to be forgotten”)
  • Restrict processing of your data
  • Object to processing based on legitimate interest
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact me at [email protected]. I will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The relevant authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219, 10969 Berlin https://www.datenschutz-berlin.de

Security

I take reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.

Changes to This Policy

I may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact

For any questions about this privacy policy or your personal data, please contact:

[email protected]