Privacy policy

This website is a plain information site: no contact form, no cookies, no analytics tools, no embedded third-party content. Personal data arises in only two places — in the server logs created automatically when the page is requested, and when you send me an email. What happens in detail is set out below.

Controller

The controller for the processing of personal data on this website within the meaning of Art. 4(7) GDPR is:

Gabriel Shabo
Memminger Straße 37, Apt. 3107
89231 Neu-Ulm
Germany
Email: kontakt@gabrielshabo.de

For any question about data protection, or to exercise your rights, an informal message to this address is enough.

Data protection officer

No data protection officer has been appointed, because the conditions for doing so are not met: fewer than 20 people are permanently engaged in the automated processing of personal data (Sec. 38(1) BDSG), no large-scale processing of special categories of data under Art. 9 GDPR takes place, and there is no systematic monitoring (Art. 37(1) GDPR). Please contact the address above directly.

Visiting the website and server logs

Every time this website is accessed, your browser necessarily transmits data to the server hosting the page. This data is recorded in log files:

  • the IP address of the requesting device
  • the date and time of access
  • the name and URL of the file retrieved
  • the volume of data transferred and whether the request succeeded
  • the browser used, including its version, and the operating system
  • the previously visited page (referrer), if your browser sends it

Purpose: delivering the page, keeping it running reliably, investigating faults, and detecting and defending against attacks.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest lies in providing this website free of technical faults and in keeping it secure. Without this processing, a website cannot technically be delivered at all.

Retention: log data is deleted as soon as it is no longer needed for the purpose it was collected for, and at the latest after 30 days. Individual IP addresses are kept longer only where this is necessary to pursue a specific attack.

Log data is not combined with other sources and is not analysed to draw conclusions about you as a person. No audience measurement and no profiling takes place.

Hosting

This website is hosted by an external service provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

IONOS provides storage, computing capacity and connectivity, and processes the log data described above exclusively on my behalf and on my instructions. This is governed by a data processing agreement under Art. 28 GDPR. The servers used are located in Germany or elsewhere within the European Union.

No cookies, no tracking, no consent banner

This website sets no cookies and stores or reads no information on your device — neither through localStorage nor sessionStorage nor comparable techniques. Consent under Sec. 25(1) TDDDG is therefore not required, and for the same reason you will find no consent banner here.

Likewise, none of the following are used:

  • audience or usage analytics tools (such as Google Analytics, Matomo, Plausible)
  • tag managers, advertising or conversion pixels, retargeting
  • social media plugins or like buttons
  • profiling, scoring or personalised targeting

The fact that I work with web analytics and A/B testing professionally changes nothing about this: none of it is deployed on this site.

Fonts, images and scripts are served from my own server

Every component of this page — fonts, images, stylesheets and JavaScript — is delivered from the same server as the page itself. The fonts are embedded locally; no connection to Google Fonts or to fonts.gstatic.com is established. No content delivery network is used, and no third-party content is embedded: no maps, no videos, no booking or calendar widgets.

Simply visiting this website therefore causes your browser to connect to no third party whatsoever, and your IP address is transmitted to no third party.

Getting in touch by email

This website has no contact form. The “Get in touch” buttons and the email address in the footer are ordinary mailto links: clicking one opens your own email program with my address in the recipient field. As long as you send nothing, no data reaches me.

If you do write to me, I process what you provide yourself: your email address, your name if you give it, the content of your message and the technical header data of the email.

Purpose: handling and answering your enquiry, and carrying out any collaboration that follows from it.

Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns the conclusion or performance of a contract; otherwise Art. 6(1)(f) GDPR, based on my legitimate interest in responding to enquiries.

Retention: your message is deleted once the underlying matter is closed and no retention obligation stands in the way. Commercial and tax retention periods — six and ten years respectively under Sec. 257 HGB and Sec. 147 AO — remain unaffected; for that period processing is restricted.

The mailbox for this address is likewise operated by IONOS SE, acting as a processor under Art. 28 GDPR. Please note that an unencrypted email can in principle be read by others in transit. If you wish to send confidential information, contact me first so we can agree on a secure route.

Links to external sites

This website links in a few places to third-party sites: my profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) and the projects I work on at vaultess.de and eviyo.de.

These are plain links, not embeds: a connection to those providers is established only when you click the link. From that moment their privacy policies apply. I have no influence over the nature or extent of the processing that takes place there and cannot accept responsibility for third-party content.

Recipients of the data

Your data is not sold, not used for advertising and not passed on to third parties. The only party with access is the processor named above, and only to the extent required to operate the website and the mailbox.

Disclosure to authorities or courts occurs only where I am legally obliged to do so, or where it is necessary to assert or defend legal claims.

Transfers to third countries

No personal data is transferred to a country outside the European Union or the European Economic Area. Hosting and email run on servers in Germany or the EU.

If you click an external link, you leave this website. The provider concerned — LinkedIn, for instance — may transfer data to third countries. That lies outside my sphere of responsibility.

Retention at a glance

  • Server logs: 30 days at most, then deleted
  • Email correspondence: until the matter has been dealt with
  • Business-relevant correspondence: six or ten years under commercial and tax law, then deleted

No data is kept beyond this.

Your rights as a data subject

You have the following rights in relation to me as the controller:

  • Access to whether and which data I process about you, including purpose, recipients and retention period (Art. 15 GDPR)
  • Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
  • Erasure, unless a statutory retention obligation stands in the way (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR)
  • Objection to processing based on a legitimate interest (Art. 21 GDPR — see the following section)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to kontakt@gabrielshabo.de is sufficient. Exercising these rights is free of charge.

Right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. On this website this concerns the processing of server logs and the handling of enquiries that do not relate to a contract.

If you object, I will no longer process the data concerned unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

No particular form is required. Please address your objection to kontakt@gabrielshabo.de.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, Art. 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR. The competent authority is the one for your place of residence, your place of work or the place of the alleged infringement. The authority responsible for me as controller is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Postfach 1349
91504 Ansbach, Germany
Phone: +49 981 180093-0
Email: poststelle@lda.bayern.de
www.lda.bayern.de

Provision of data and automated decisions

You are under no legal or contractual obligation to provide me with personal data. The processing of log data is an unavoidable technical consequence of requesting the page; everything else you provide voluntarily. Without a means of contact, however, I cannot answer an enquiry.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Security of transmission

This website is delivered exclusively over a TLS-encrypted connection (HTTPS). You can recognise this by the https:// in the address bar and the padlock symbol in your browser. Data you transmit while visiting this page therefore cannot readily be read by third parties.

Changes to this privacy policy

I update this policy whenever the processing on this website changes — because a new service is added, for example — or where the legal position requires it. The version published here is the one that applies.

Last updated: August 2026

Open to opportunities Full-time or freelance