Privacy Policy
Last updated: August 31, 2026
This privacy policy explains how Hans Christoph Luther (“I”, “me”) collects, uses, and protects your personal data when you visit hansluther.com (the “Website”). I’m based in Berlin, Germany, and this policy complies with the EU General Data Protection Regulation (GDPR).
Data Controller
Hans Christoph Luther
10997 Berlin, Germany
Email: privacy@hansluther.com
What Data I Collect
Contact Form Submissions
When you submit the contact form on this Website, I collect:
- Your name
- Your email address
- Your message content
This data is collected based on your consent (Art. 6(1)(a) GDPR) and my legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).
Server Logs
When you visit this Website, the hosting provider automatically collects standard server log data, which may include your IP address, browser type, referring page, and the date and time of your visit. This is necessary for the operation and security of the Website (Art. 6(1)(f) GDPR).
Analytics
Analytics. This site uses PostHog, hosted in the EU (PostHog EU Cloud, Frankfurt). We run it cookieless: no cookies, no cross-site identifiers, no fingerprinting, and therefore no consent banner — nothing on this site requires your consent under the TTDSG. IP addresses are discarded at ingestion and never stored. Events are aggregated, within-session measurements (which pages, which language, which region band) with no persistent visitor identity. Session recordings are switched off. Analytics events are retained for 6 months, then deleted.
How I Use Your Data
- Contact form data is used solely to respond to your inquiry. I do not add you to any mailing list or use your information for marketing purposes.
- Server logs are used for security monitoring and to ensure the Website functions properly.
Data Storage and Retention
Contact form submissions are retained only as long as necessary to respond to your inquiry and for any reasonable follow-up, after which they are deleted. Server logs are retained according to the hosting provider’s standard retention period, typically no longer than 30 days.
Third-Party Services
- Hosting provider — This Website is hosted by a third-party provider that may process server log data on my behalf.
- Formspark — Contact form submissions are transmitted via Formspark (formspark.io), operated by Trampoline Software SRL (Ghent, Belgium). Formspark processes your name, email address, and message content in order to deliver the submission to me. As with any web request, Formspark also receives standard HTTP metadata such as your IP address, User-Agent, Referer, and other request headers. Formspark hosts its infrastructure in Ireland (EU) and performs server-side spam filtering on all submissions. Formspark offers a Data Processing Agreement (DPA) upon request. For details on their data practices, see the Formspark Privacy Policy.
Spam protection. Forms are protected by Botpoison. When you submit a form, your IP address is transmitted to Botpoison transiently to distinguish humans from bots; it is not used for any other purpose.
Your Rights Under GDPR
As an EU resident, you have the right to:
- Access the personal data I hold about you
- Rectify inaccurate or incomplete data
- Erase your personal data (“right to be forgotten”)
- Restrict processing of your data
- Object to processing based on legitimate interest
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, contact me at privacy@hansluther.com. I will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority. The relevant authority for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219, 10969 Berlin https://www.datenschutz-berlin.de
Security
I take reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.
Changes to This Policy
I may update this policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact
For any questions about this privacy policy or your personal data, please contact: