Privacy Policy – Data Protection & IPFS/IPNS Notes for tenckhoff.eu

This notice informs you pursuant to Art. 12 et seq. GDPR about the processing of personal data on this website and explains our data protection and specific IPFS/IPNS notes.

1. Controller

Dr. Jürgen Theo Tenckhoff
Röttgen 16
53773 Hennef (Sieg)
Germany
Email: info@tenckhoff.de

2. Hosting & Publication via IPFS/IPNS

This website is published in a decentralized manner via IPFS and IPNS. Content is addressed by content IDs (CIDs) and can be delivered through different gateways. Depending on the gateway used, technical connection data (e.g., IP address, timestamp, requested resource) may be processed and temporarily stored in log files.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests: technical delivery, stability, security, abuse prevention).

3. Server Log Files (technically necessary data)

When using gateways, the following data may be processed: IP address, date/time, time zone, requested file/URL, referrer, user agent, status codes, transferred data volumes. These data are required for secure operation, are usually stored briefly and then deleted. No combination with other data sources takes place.

4. Reach Analytics with Matomo (cookieless, self-hosted)

• Operation: Matomo is self-hosted on own infrastructure (analytics.tenckhoff.de) in Germany.
• Cookies: No analytics cookies (cookieless).
• Protection: Do-Not-Track (DNT) is respected; IP addresses are pseudonymized (e.g., truncation).
• Purpose: Statistical analysis (e.g., page views, dwell time, country) to optimize the website.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement and optimization).
• Recipients: No disclosure to third parties; data remain solely on own infrastructure.
• Storage duration: Raw data are generally deleted or aggregated after 180 days.

5. Contact Form with Cloudflare Turnstile (bot/spam protection)

For the contact form we use Cloudflare Turnstile to prevent automated abuse. Technical usage data are processed (e.g., IP address, date/time, user agent, referrer, language/display settings), interactions with the widget, and the result/token of the check.

• Legal basis: Art. 6(1)(f) GDPR (IT security, abuse prevention).
• Recipient: Cloudflare as processor; possible third-country transfers (especially the USA) based on appropriate safeguards (incl. EU SCCs).
• Cookies: Turnstile sets no advertising cookies; validation tokens are short-lived.
• Further information: see Cloudflare privacy policy.

6. Contact by Email

When contacting us by email, we process your data to handle the request (Art. 6(1)(b) or (f) GDPR). Data are deleted after completion; statutory retention duties remain unaffected.

7. Recipients / Disclosure

Personal data are disclosed only insofar as necessary to provide the website (e.g., infrastructure/gateway operators), to comply with legal obligations, or to enforce rights.

8. Third-country Transfers

When using gateways outside the EU/EEA, transfers to third countries may occur (Art. 46/49 GDPR).

9. Storage Duration

Log data are generally deleted after a short period unless longer storage is required for security/evidence. IPFS content is immutable (CID-based); updates occur via new CIDs referenced by IPNS.

10. Your Rights

• Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21) to processing based on Art. 6(1)(f) GDPR
• Complaint with a supervisory authority (Art. 77), e.g., LDI NRW

11. Security

Organizational and technical measures protect your data; transport encryption (TLS) is used when content is delivered via gateways.

12. External Links

Responsibility for linked external content lies with the respective operators; please note their privacy notices.

13. Changes to this Notice

We may update this policy if the legal situation, services used, or publication method changes. The current version is the one referenced via IPNS.