Privacy policy

This notice explains how personal data is processed when you visit this website, in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Under construction. This notice is not yet complete: the controller’s postal address, and the supervisory authority it determines, are still pending.

Controller

Max Polwin
[Postal address — to be added]
Germany
Email: max.polwin@protonmail.com

Hosting and server log files

This site is hosted on the infrastructure of Netlify, Inc., based in San Francisco, California, USA (“Netlify”), acting as a processor under a data processing agreement. Netlify states in its own privacy policy that it relies on the EU-U.S. Data Privacy Framework and on EU Standard Contractual Clauses for transfers of personal data outside the European Economic Area; see Netlify’s privacy policy for current detail.

Whenever this site is accessed, Netlify’s infrastructure automatically records technical access data in server log files: the requesting device’s IP address, the date and time of access, the page requested, the amount of data transferred, the referring page, and the browser and operating system used. This processing is necessary to deliver the page and to safeguard the legitimate interest in the security and stability of the site (Article 6(1)(f) GDPR). Log data is not merged with other data sources and is retained only for as long as necessary for these purposes.

Fonts

Typefaces (Inter, JetBrains Mono) are hosted on this site’s own server and delivered together with the page. No connection is made to Google Fonts or any other external font provider, and no data is transmitted to a third party for this purpose.

Cookies and tracking

This site does not set cookies and does not use analytics, advertising, or tracking tools of any kind at this time. Search on the site (where available) runs entirely in your browser against a static index and does not contact a server. If this changes, this notice will be updated in advance.

Contact by email

If you contact me by email, the information you provide (your email address and the content of your message) is stored and used solely to process and respond to your enquiry, on the basis of Article 6(1)(b) or, where no contract is in prospect, Article 6(1)(f) GDPR (legitimate interest in responding to enquiries addressed to me).

Your rights

Under the GDPR, you have the right to request access to your personal data (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and to object to processing carried out on the basis of legitimate interest (Article 21). To exercise any of these rights, contact me using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement (Article 77 GDPR). [The authority responsible for this site’s controller will be named here once the provider’s address is finalised.]

Max Polwin
Authors
I turn unclear requirements into systems that work, in digital products and in sustainable finance regulation alike. I clarify what is actually needed, build it, and make sure it holds once real users or a regulator look closely.