Alexander Nabert
Home

Privacy Policy

This page explains what data is processed when you visit the website and why. The site is built to minimize data and does not use tracking or ads.

Controller

Controller under the GDPR: Alexander Nabert.

Contact: nabert@pm.me

Access Data (Hosting)

When you visit the site, the hosting provider processes technically necessary access data in server log files. This can include:

The purpose is to deliver the website, ensure security, and troubleshoot. The legal basis is Art. 6(1), letter f, GDPR (legitimate interest).

Recipient: hosting provider (processor). Hosting provider: UD Media GmbH, Kölner Straße 28, 41812 Erkelenz, Germany.

Retention: personal log data is deleted after 7 days at the latest. Any retention beyond this period is only in anonymized or altered form (in particular without the full IP address), so that no personal reference remains.

Local Storage & Device Access

This website does not set cookies.

Only with your consent does the website store the following preferences in Local Storage:

If you consent, the website remembers your chosen language and theme across page loads and future visits so you do not need to select them again; the legal basis for these optional preference storages is § 25(1) TDDDG and Art. 6(1), letter a, GDPR (consent). If you reject (including closing the dialog via “X”), the website deletes `lang` and `theme` from Local Storage, if present, and does not store them persistently.

You can reopen your choice at any time via this link: Website settings. The same link is also available in the website footer.

Regardless of your choice, the consent status (`site_consent_v1`) is additionally stored in Local Storage so your decision can be applied on this device and you are not asked again on every page load. The legal basis for this is § 25(2) no. 2 TDDDG (strictly necessary device access); the legal basis for processing consent proof data is Art. 6(1), letter c, GDPR in conjunction with Art. 7(1) GDPR.

Local Storage retention: `lang`, `theme`, and `site_consent_v1` are each stored for 1 year from your decision. After that period, these entries are treated as expired and deleted on the next website use; the consent prompt is then shown again.

If you copy a value in the contact section (Signal username, email address, or PGP fingerprint), only the selected value is written to your clipboard.

Contact

If you contact me via email or Signal, I process the data you provide (e.g., name, contact details, message content and attachments) to respond and communicate. The website itself does not collect form data; contact takes place only via communication channels you actively choose.

Recipients/service providers involved in communication are Proton AG (Proton Mail) and Signal Messenger, LLC (Signal). Their privacy notices also apply. The legal basis is Art. 6(1), letter b, GDPR (pre‑contractual requests) or Art. 6(1), letter f, GDPR (legitimate interest in communication).

International data transfers: Proton is based in Switzerland; Switzerland is covered by an EU adequacy decision. In its privacy notice, Proton states that for certain processing by third-party recipients (including in the U.S.) it uses appropriate safeguards, in particular Standard Contractual Clauses (SCCs), and in some cases additional mechanisms (e.g., Binding Corporate Rules or certifications); the controlling source is Proton's privacy policy.

For Signal, the provider states that encrypted information and metadata may be transferred to the U.S. and other countries. Processing in that context is governed by Signal's privacy information. Where processing takes place in countries without an adequacy decision, a level of data protection equivalent to the EU may not be fully guaranteed in all cases.

External Links

This website provides links only (no embedded external content) to external services, currently including ARD Audiothek, ARD Mediathek, Apple App Store, BJV, BR, European Press Prize, Google Play Store, Grimme Online Award, Grimme Prize, Herder, medium magazin, Netzwerk Recherche, Politico, Prix Europa, Proton, Querverlag, Quotenmeter.de, Reporter-Forum, Signal, Tagesschau, Tagesspiegel, taz, ver.di, VG Wort, BayLDA, Berlin Commissioner for Data Protection and Freedom of Information, web.archive.org, WELT, and YouTube.

Simply visiting this website does not load content from those providers. A connection to the respective provider is established only after you click an external link; in that case, the referrer URL may be transmitted for technical reasons. To reduce this transmission, external links use `rel="noreferrer"`. From the moment you click, the provider’s privacy policy applies; processing in third countries may occur.

Your Rights

You also have the right to lodge a complaint with a supervisory authority, for example in the EU member state of your residence or the place of the alleged breach. I generally respond to data subject requests under Art. 15 et seq. GDPR within one month of receipt. In exceptional cases, this period may be extended to the extent permitted by law.

Competent supervisory authorities include the Bavarian Data Protection Authority (BayLDA) and the Berlin Commissioner for Data Protection and Freedom of Information.

Requirement to Provide Data

Providing data is neither legally nor contractually required. Without technical data (e.g., IP address) the website cannot be delivered. Beyond technically required connection data, no information is mandatory.

Automated Decision‑Making

No automated decision‑making or profiling takes place.

Last Updated

February 18, 2026