Privacy notice.

1. Controller and contact

The controller within the meaning of the General Data Protection Regulation (GDPR) is Marcin Nawrocki Freiherr von Enzberg.

Kaiser-Friedrich-Str. 27
10585 Berlin
Germany

Email: marcin@nawrocki.berlin
Telephone: +49 1525 3529524

You may use these contacts to ask privacy questions, exercise your GDPR rights, or object to processing. No separate data protection officer is appointed for the present personal website.

2. No tracking by website components

This website is delivered as static HTML, CSS, locally served images, and local fonts. The website source contains no executable browser JavaScript, analytics service, advertising tags, tracking pixels, fingerprinting software, embedded social-media widgets, embedded video players, contact form, user account, or newsletter signup. It does not read or write local storage to recognise visitors and does not use its own code to create user profiles. No optional tracking cookies are implemented by the website.

Important distinction: a visit is not anonymous. A hosting provider, content-delivery network, or security service can process technical request data, and certain security configurations may set necessary cookies. Their processing is addressed below and must be checked against the actual deployment. This notice does not claim that infrastructure operators process no data.

3. Technical delivery and access logs

When your browser requests a webpage, technical information is transmitted as part of HTTP or HTTPS. Depending on the hosting configuration, the infrastructure provider may process an IP address, time of request, URL, HTTP method, response status, transferred data, browser identification, referring URL, language, and security-related request headers. This information may be necessary to transmit pages, maintain availability, prevent misuse, investigate failures, and defend infrastructure.

For processing necessary to deliver and secure the website, the generally applicable basis is Article 6(1)(f) GDPR, based on legitimate interests in providing a functional, secure service. Processing under a binding legal obligation may rely on Article 6(1)(c) where applicable. The site owner does not operate a separate visitor-log analysis, analytics dashboard, or tracking database through the website's source.

4. Hosting and delivery providers

The website is designed for delivery using a European static hosting and content-delivery network (CDN). Hosting, CDN, and security service providers receive the connection and request information needed to serve the site and mitigate abuse. Depending on the arrangement, they may act as processors or independent controllers for specific security and operational functions. Providers and their authorised subprocessors may operate infrastructure outside Germany or the European Economic Area.

Appropriate controller-processor agreements and lawful international-transfer safeguards are required when applicable. A transfer to a country without an adequacy decision may require safeguards such as the European Commission's standard contractual clauses and supplementary measures. Where relevant, an adequacy decision, including the EU-US Data Privacy Framework for a properly certified recipient, may be applicable. A global CDN does not by itself guarantee data residency in the EU.

The selected CDN provider states that its traffic logs are stored in the EU and that IP anonymization is enabled by default. It offers anonymization that removes the last IPv4 octet or replaces the logged IP with 0.0.0.0. These settings concern stored logs; the provider must still process connection IP addresses while delivering pages. The precise anonymization setting, retention period, subprocessors, and any security exceptions must be checked in the active deployment and its contractual documentation.

5. Cookies, local storage, and consent

The website's own code does not set cookies, use browser storage for analytics, or perform cross-site tracking. This is why it does not implement an optional tracking-consent banner. Standard browser caching makes assets load faster and is not used by the website to identify individual visitors.

However, the hosting or security layer may employ session or security measures such as anti-abuse cookies, depending on deployment settings. These measures must be assessed under section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and the GDPR. Storage or access that is not strictly necessary may require prior informed consent. If optional analytics or other tracking is ever added, this notice and the consent arrangements must be updated before enabling it.

6. Contacting the website operator

If you choose to contact the operator by email or telephone, the contact information and message details you provide are processed to handle and respond to the inquiry. The legal basis is generally Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where the inquiry concerns pre-contractual steps or an existing contractual relationship. An applicable legal retention obligation may require longer storage under Article 6(1)(c). Emails may be handled by a separate email service provider. No messages are collected through an embedded website form.

7. External links

Google Scholar, professional profiles, academic publishers, audio pronunciation, time services, and referenced research organisations are linked with ordinary hyperlinks. Their resources are not loaded in your browser merely because this page contains a link. If you decide to open a destination, its provider can process the connection under its own policies. Many external links open a separate tab; this website does not embed their scripts or trackers.

8. Recipients, retention, and security

Technical request data may be processed by the chosen hosting, CDN, security and infrastructure service providers and their authorised subprocessors. Correspondence may be processed by email and telecommunications providers. The operator does not sell visitor data, run personalised advertising, or build browsing profiles. Technical records are retained according to the verified operational need and provider settings, while correspondence is retained as long as needed to respond or meet applicable legal obligations. Where feasible, access to personal information is restricted and secure connections are used.

Because log-storage and deletion schedules differ among hosts, they are not represented here as a fixed number of days. They require confirmation before a public deployment and whenever the host changes.

9. Your rights under the GDPR

Depending on the circumstances, you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), and data portability where applicable (Article 20). You may object to processing based on legitimate interests under Article 21. If processing is based on consent, consent may be withdrawn for the future under Article 7(3). You also have the right to lodge a complaint with a competent supervisory authority under Article 77.

In Berlin, the relevant authority is the Berlin Commissioner for Data Protection and Freedom of Information. Requests can be directed to the operator using the contact details above.

10. Children and automated decisions

The website is intended for general research and professional information. It does not offer accounts, child-directed services, automated individual decision-making, or profiling within the meaning of Article 22 GDPR.

11. Changes to this notice

This notice is updated if material features, hosting arrangements, data processing, or applicable requirements change. If new non-essential tracking or embedded third-party content is proposed, it must be separately evaluated before activation. The version visible here describes the website's own currently implemented frontend functionality.

Last reviewed · 10 November 2026