In short
- This website sets no cookies and uses no analytics, tracking or advertising tools.
- There are no contact forms, comments, user accounts or embedded third-party content.
- Fonts are served from this website itself; no data is sent to Google or other font providers.
- The only personal data processed when you visit is the technical data your browser sends to the hosting provider, Cloudflare, so that the website can be delivered and protected.
Controller
The controller responsible for data processing on this website (Art. 4 (7) GDPR) is:
Steffen PundtÄußere Hauptstraße 3B
85579 Neubiberg
Germany
Email: steffen-pundt@web.de
Phone: +49 178 3299615
Hosting and delivery
This website is hosted and delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”). When you open a page, your browser connects to Cloudflare’s servers. In doing so, Cloudflare processes the following data:
- your IP address,
- date and time of the request,
- the page or file requested,
- the website you came from (referrer), if your browser sends it,
- browser type and version, operating system and language settings.
This data is needed to deliver the website to your device, to keep it stable and to protect it against attacks and misuse (for example denial-of-service attacks). The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is a secure, reliable and fast website. I do not combine this data with other sources and do not use it to identify visitors.
Cloudflare processes this data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Cloudflare may process data in the USA. Cloudflare, Inc. is certified under the EU–U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). In addition, Cloudflare’s data processing agreement includes the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR). Cloudflare deletes or anonymises this data in line with its own retention periods. More information:Cloudflare privacy policy.
Encryption
All pages are delivered over an encrypted connection (TLS). You can recognise it by “https://” and the lock symbol in your browser’s address bar.
Contact by email or phone
If you contact me by email or phone, I process the details you provide (for example your name, email address and message) to deal with your enquiry. The legal basis is Art. 6 (1) (f) GDPR (my legitimate interest in answering enquiries) or, if your enquiry concerns a contract, Art. 6 (1) (b) GDPR. I delete the data once your enquiry has been dealt with, unless statutory retention obligations apply. Emails are handled through my email provider, WEB.DE (1&1 Mail & Media GmbH, Germany).
Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you (Art. 15),
- have incorrect data corrected (Art. 16),
- have your data deleted (Art. 17),
- have processing restricted (Art. 18),
- receive your data in a portable format (Art. 20),
- object at any time to processing based on Art. 6 (1) (f) GDPR, on grounds relating to your particular situation (Art. 21).
To exercise these rights, contact me using the details above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany,www.lda.bayern.de.
No automated decision-making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place on this website.
Changes
I will update this privacy policy if the website or the services it uses change. The current version is always available on this page.
Last updated: October 2026