Privacy.

How personal data is processed on this website.

1. Privacy at a glance

This website presents my work and offers a way to contact me. Technical data is processed to deliver and secure the website when you visit. I receive further information if you send me a message. I do not use analytics or advertising trackers.

This notice explains which personal data is processed, why it is processed and what rights you have.

2. Data controller

The person responsible for processing personal data on this website is:

Marc Linstädter
Marienburger Str. 35
42277 Wuppertal
Germany

Email:

3. Hosting and access data

This website is provided through AWS Amplify Hosting. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Technically necessary access data is processed to deliver and secure the website, including your IP address, time of access, requested URL, browser and operating system information and, where applicable, the referring page.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the reliable and secure provision of this website. Technical access data is retained for as long as it is needed to deliver the website, diagnose faults and prevent or investigate misuse.

AWS also uses infrastructure distributed around the world. Processing outside the EU or EEA therefore cannot be ruled out. AWS explains its contractual safeguards, including EU Standard Contractual Clauses for relevant international transfers, in the AWS GDPR Center and the AWS Privacy Notice.

4. Getting in touch

If you contact me, I process your contact details, your message and any additional information you choose to provide to respond to your enquiry and follow-up questions.

Submitting the contact form transmits your name, email address and message.

For technical processing, I use IT service providers for hosting and message delivery based in Luxembourg and email service providers based in Ireland. Processing outside the EEA, for example in the United States, is also possible. Information about safeguards, including adequacy decisions and EU Standard Contractual Clauses, is available in the international data-transfer information and the Hosting section above. You can request further information about recipients and the safeguards applicable to your data using the contact details above.

For enquiries relating to a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is Article 6(1)(f) GDPR. The legitimate interest is responding to your message and continuing the related conversation.

You choose whether to contact me and what additional information to share. Without a message and a means of contacting you, I may be unable to answer your enquiry. Please do not send confidential documents or particularly sensitive information through this form.

5. Technology and external links

Fonts, cookies and analytics

Fonts and images are served locally with the website. This website does not use analytics or advertising trackers or set its own audience-measurement cookies. External videos and social media feeds are not embedded automatically.

External links

Links, such as those to LinkedIn, lead to independent websites. A connection to the relevant provider is made only when you follow the link. That provider’s privacy information then applies.

Encryption

The published website uses HTTPS to encrypt the connection between your browser and the web server. Email transmission uses your email provider’s security procedures. Complete protection of every internet or email communication cannot be guaranteed.

This website does not carry out automated decision-making or profiling.

6. Retention

Personal data is kept only for as long as it is needed for the relevant purpose. Contact messages are deleted once the enquiry has been dealt with, unless statutory retention duties or legitimate reasons require longer retention, such as establishing or defending legal claims. Where a statutory retention period applies, the data is deleted after that period expires.

7. Your rights

Subject to the applicable legal conditions, you have the right to access your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Where processing is based on legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). To exercise your rights, please use the contact details above.

You may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, your workplace or the alleged infringement. The relevant authority for North Rhine-Westphalia is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

Last updated: October 2026