Privacy

1. Controller

The controller responsible for processing personal data on this website is:

Email: hello@workingcuriosity.com

Working Curiosity is a project name and is not a separate legal entity.

2. Hosting and server logs

This website is hosted on a virtual private server provided by:

When this website is accessed, technically necessary server data may be processed.

This may include in particular:

• IP address
• date and time of the request
• requested URL or resource
• HTTP status code
• transferred data volume
• referrer information where transmitted by the browser
• browser and user-agent information

The processing is necessary to deliver the website, maintain reliable operation, diagnose technical problems and protect the server against misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR.

The legitimate interests are the secure, reliable and technically correct operation of the website and its infrastructure.

IONOS may process personal data as a hosting service provider on behalf of the controller.

The current NGINX server configuration rotates access and error log files daily and retains up to 14 rotated log files.

Retention follows this technical rotation policy. It is not stated as a guaranteed fixed deletion period of exactly 14 days.

3. Contact by email

If you contact us by email, we process the information contained in your message, including your email address and any information you voluntarily provide.

The data is used to process and respond to your inquiry.

Where the communication relates to a contract or steps prior to entering into a contract, processing is based on Art. 6(1)(b) GDPR.

For other inquiries, processing is based on Art. 6(1)(f) GDPR. The legitimate interest is responding to inquiries concerning Working Curiosity, Sekalum and the work published on this website.

The data will be deleted when the inquiry has been conclusively resolved unless statutory retention obligations require longer storage.

4. YouTube video

The Sekalum page contains an optional embedded YouTube video.

No connection to YouTube is established when the page is initially loaded. The video player is loaded only after the visitor explicitly selects the “Load video from YouTube” button.

After activation, the player is loaded using youtube-nocookie.com.

When the player is loaded, information such as the IP address, browser and device information and information about the requesting page may be transmitted to Google/YouTube.

Loading the embedded player is voluntary.

The legal basis for processing initiated by loading the external video is the visitor’s consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from the visitor’s device, § 25(1) TDDDG.

Consent is not required simply to browse the Working Curiosity website because the YouTube player is not loaded until explicitly requested.

The visitor can alternatively follow the normal external link to YouTube. When doing so, the privacy terms of the external provider apply.

5. Cookies, analytics and tracking

Working Curiosity does not use its own analytics or advertising tracking on this website.

The website does not load external fonts and does not use advertising pixels or similar tracking services.

Third-party processing may occur after a visitor actively loads or follows external content such as the YouTube video described above.

6. External links

This website contains links to external services, including GitHub and YouTube.

Displaying a normal external link does not by itself load content from that provider.

When a visitor follows an external link, the privacy practices of the respective external provider apply.

7. Rights of data subjects

Subject to the applicable legal requirements, visitors may have rights including:

• access to their personal data
• rectification of inaccurate data
• erasure
• restriction of processing
• objection to processing
• data portability where applicable
• withdrawal of consent at any time with effect for future processing

Visitors also have the right to lodge a complaint with a competent data protection supervisory authority.

For the controller’s location in Hesse: