Last updated: 1 October 2026
Controller
Tomislav Maric
Martinstrasse 75
64285 Darmstadt
Germany
Email: tomi.maric@proton.me
Website hosting and access logs
This static website is hosted using GitLab Pages. When the website is accessed, the hosting provider processes technical connection data required to deliver and secure the site. According to GitLab’s current privacy statement, GitLab Pages access logs contain the visitor’s IP address, time of access, and pages visited and are retained for seven days on a rolling basis.
The legal basis for this processing is Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable, and technically functional provision of the website.
GitLab identifies GitLab B.V., Eduard van Beinumstraat 28, 1077 CZ Amsterdam, Netherlands, and GitLab Inc., 268 Bush Street no. 350, San Francisco, CA 94104, United States, in connection with its services. GitLab states that it relies on the EU-U.S. Data Privacy Framework for relevant transfers to GitLab Inc. Details are available in the GitLab Privacy Statement.
Contact by email
If you contact me by email, I process the information you provide, together with the associated communication metadata, to answer your inquiry and, where requested, to prepare or perform a professional engagement.
The legal basis is Article 6(1)(b) GDPR where the communication concerns pre-contractual steps or a contract. For general professional communication, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is responding to relevant inquiries and maintaining professional communication.
Messages are retained only for as long as required for the relevant purpose and any applicable statutory documentation or retention obligations. Please do not send confidential project information in an initial inquiry.
Analytics, cookies, and embedded services
With your prior consent, this website uses Google Analytics 4 (Google Ireland Limited and, where applicable, Google LLC) to understand aggregate visits and improve the site. Analytics is off by default: the Google tag is not requested and analytics cookies are not set unless you select “Allow analytics.” Rejecting analytics does not affect access to the website. You can withdraw or change your choice at any time using “Privacy & analytics settings” in the footer; withdrawal disables future analytics collection and removes Google Analytics cookies stored by this site.
When enabled, Google Analytics may process page views, approximate location, browser and device information, and session statistics. Google Analytics uses first-party cookies, including _ga and a stream-specific _ga_* cookie, to distinguish browsers and maintain session state. The tag is configured to expire these cookies after 180 days. Google says it uses IP addresses at collection time to derive location and then discards them before data are logged. Data are processed to provide analytics reports and may be transferred to Google’s infrastructure outside the European Economic Area under applicable data-transfer arrangements. See Google’s explanation of Analytics data collection, regional data collection, and privacy policy.
The legal basis for analytics processing is your consent (Article 6(1)(a) GDPR). You may withdraw it at any time; withdrawal does not affect processing carried out before withdrawal. The consent preference is stored locally in your browser so the site can remember your choice. Google Analytics applies the retention setting configured for the property to user- and event-level data; aggregated reports may have different retention rules.
This site does not use analytics for advertising or personalized advertising. A contact-form backend, newsletter, and user accounts are not operated. Fonts, scripts, and interactive scientific visualizations are served locally rather than loaded from third-party content platforms.
Links to external websites do not transmit information to those services until you follow the link. The privacy practices of the destination then apply.
Recipients and transfers
Personal data may be processed by the hosting and email providers required to deliver the website and communication. Data are not sold. Information from a consulting inquiry is not submitted to an external AI service without explicit agreement on the tools, data routing, access, and retention applicable to that engagement.
Your rights
Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction of processing, or data portability. You may object to processing based on Article 6(1)(f) GDPR. Where processing is based on consent, consent may be withdrawn for the future.
You also have the right to lodge a complaint with a data-protection supervisory authority. The competent authority in Hesse is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstrasse 7
65185 Wiesbaden
Germany
datenschutz.hessen.de
Changes to this notice
This notice will be updated when the website, hosting arrangement, or relevant data-processing practices change.