Skip to content

Legal

Privacy policy

Last updated: 19 July 2026

1. The short version

This website sets no cookies, loads no fonts from third-party servers and does not track your behaviour across pages. The only thing loaded is a Cloudflare measurement component that works without cookies and without any link to your person (see section 4). The live chat is only loaded after your explicit consent.

2. Controller

Tom Schorn
Hauptstr. 23
56271 Roßbach, Germany
Email: info@tom-schorn.de

No data protection officer has been appointed, as the legal requirements for this are not met.

3. Hosting and server log files

This website is operated on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany). Cloudflare delivers the pages and protects them against attacks and overload.

When you access the site, technically necessary data is processed, in particular your IP address, date and time, the address requested, the amount of data transferred, browser and operating system. This data is required to deliver the page at all and serves the security of operations.

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in the secure and uninterrupted operation of the website. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. As Cloudflare is a US company, transfers to the USA may occur; these are safeguarded by standard contractual clauses.

4. Audience measurement

I use Cloudflare Web Analytics to see which pages are requested and how quickly they load. For this, a small measurement component is loaded from static.cloudflareinsights.com when a page is opened. No cookies are set and no information is stored on or read from your device. There is no cross-device recognition and no fingerprinting. The evaluation is not linked to individuals.

Because nothing is stored on or read from your device, § 25 TDDDG does not apply and no consent is required. The legal basis for the processing is Art. 6 (1) (f) GDPR, my legitimate interest in a comprehensible and technically sound website.

5. Live chat (Crisp)

For the chat I use Crisp IM SAS, 2 Boulevard de Launay, 44100 Nantes, France. The servers are located in Amsterdam. A data processing agreement under Art. 28 GDPR forms part of the Crisp terms of service. As I am a controller established in the European Economic Area, that agreement expressly rules out any transfer of your data to countries outside the EEA.

The chat is only loaded after you have explicitly agreed in the notice banner. Without your consent, no Crisp script is loaded and no connection is established. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

If you enable the chat, Crisp processes your messages, your IP address and technical details about your browser and device. If you voluntarily provide a name or email address, these are stored as well. A chat session and the associated cookies are only created once you actually use the chat, not when the page loads ("Total Privacy"). I delete chat histories 14 days after the enquiry has been resolved. Until then they are retained so that I can pick up the conversation if you come back with a follow-up.

Live typing preview (MagicType)

Crisp transmits your text to me while you are still typing so that I can respond faster. This means I can see what you write before you press send. If you discard a sentence, it may still have been shown to me. Only what you actually send is stored permanently.

If your browser sends the "Do Not Track" signal, Crisp automatically disables this feature for you. I cannot override that decision as the operator, and I have configured the relevant setting so that your preference is respected.

Screen viewing (MagicBrowse)

During an active chat, Crisp can show me what you see on this website so that I do not have to ask lengthy questions when something goes wrong. This view is limited to this website. I cannot see other windows, other programs or other sites. Here too: if your browser sends "Do Not Track", the feature is disabled for you.

You can withdraw your consent at any time using the "Change chat consent" item in the footer. The withdrawal takes effect from the moment it is declared; processing carried out before that remains lawful.

6. Contact by email

This website deliberately contains no contact form. If you send me an email, I process your address and the content of your message in order to reply. The legal basis is Art. 6 (1) (f) GDPR, and additionally Art. 6 (1) (b) GDPR where the contact initiates a professional relationship. I delete the message once the matter is closed and no statutory retention periods apply.

7. Fonts and external content

All fonts are hosted on this website server. No Google Fonts and no content from content delivery networks are loaded. Your IP address is therefore not transmitted to any font provider. No maps, videos or social media widgets are embedded.

Links to external sites such as GitHub or LinkedIn are ordinary references. A connection is only established when you click the link. From that point on the privacy policy of the respective provider applies.

8. Your rights

You have the right at any time to:

  • information about the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal email is enough for all of these requests: info@tom-schorn.de.

9. Right to lodge a complaint

You can lodge a complaint with a supervisory authority. The authority responsible for me is:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Hintere Bleiche 34, 55116 Mainz
datenschutz.rlp.de

10. Changes

I update this policy when the website changes technically or new services are added. The version published here is the one that applies.