Privacy Policy

Last updated: 11 January 2026

1. Controller (data controller)

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Arndt Schwaiger
93 FL 9 Triq Gorg Borg Olivier
STJ 1080 San Giljan
Malta

Phone: +49 179 7822917
Email: as@arndtschwaiger.com

2. General information

This Privacy Policy explains what personal data we process when you visit this website, why we process it, and what rights you have. “Personal data” means any information relating to an identified or identifiable person.

3. Data processed when you visit the website (server logs)

When you access this website, technical data is processed automatically to deliver the site to your device and to ensure security and stability.

Categories of data (typical server log data):

• IP address
• Date and time of access
• Requested page / file
• Referrer URL
• Browser type/version, operating system
• HTTP status code, data volume transferred

Purpose: website delivery, system security, abuse prevention, error analysis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure and reliable website operation).

Recipients / processors: Our hosting provider processes these data on our behalf: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

Storage period: Server log data is stored for as long as required for security and troubleshooting, and then deleted or anonymized, unless longer retention is necessary to investigate security incidents.

4. Contacting us

If you contact us (e.g., by email or phone), we process the data you provide to handle your request.

Categories of data:

• Contact details (e.g., email address, phone number)
• Content of your message
• Any information you choose to share (e.g., company, project context)

Purpose: communication, answering inquiries, initiating or performing a contract.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract) and/or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Storage period: We retain inquiry data for as long as needed to process your request and for follow-up, and then delete it unless statutory retention obligations apply.

5. Cookies and similar technologies

This website is intended to work without marketing or analytics cookies. We do not intentionally use cookies for tracking, profiling, or advertising on this website.

However, the technical operation of a website may involve strictly necessary technologies (e.g., for security or load distribution). If we introduce any non-essential cookies or tracking technologies in the future (e.g., analytics, ad pixels), we will request consent where required before they are set.

6. Third-party links

This website may contain links to external websites (e.g., platforms such as YouTube, LinkedIn or other third-party providers). If you click such a link, you will leave our website.

We are not responsible for the content or data processing practices of third-party websites. Please review their privacy policies directly.

7. Recipients and international transfers

We generally process personal data within the European Economic Area (EEA). If, in specific cases, data are transferred to recipients outside the EEA, this will only occur where GDPR requirements are met (e.g., an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or an applicable exception).

8. Storage duration

We store personal data only as long as necessary for the purposes described in this Privacy Policy, and delete or anonymize it afterwards, unless we are legally permitted or required to retain it longer (e.g., statutory retention periods).

9. Your rights under the GDPR

You have the following rights, subject to the conditions and limitations of the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR), in particular to processing based on Art. 6(1)(f) GDPR
• Right to withdraw consent at any time (Art. 7(3) GDPR), where processing is based on consent

To exercise your rights, please contact us using the details in Section 1.

10. Right to lodge a complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Malta, the competent authority is:

Office of the Information and Data Protection Commissioner (IDPC)
Floor 2, Airways House, Triq Il-Kbira (High Street)
Tas-Sliema SLM 1549, Malta
Phone: +356 2328 7100
Email: idpc.info@idpc.org.mt
Website: https://idpc.org.mt/

11. Security

We use appropriate technical and organizational measures to protect personal data. Please note that internet transmissions (e.g., email) may have security vulnerabilities and cannot be fully protected against access by third parties.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to this website, legal requirements, or how we process data. The “Last updated” date at the top indicates the most recent revision.