Privacy policy

1. Privacy at a glance

This website uses no cookies, no analytics tools and no embedded third-party services. Fonts, images and all other files are delivered from our own web space. Personal data is processed in three situations only: when your browser requests a page (server log), when you contact us, and when you use the performance check. Each is described below.

2. Controller

Website Tuning
Lenny Eitner

Phone:
Email:

We are not required to appoint a data protection officer.

3. Hosting and server log

The website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany, on servers in Germany. When you open a page, the web server records a log entry: your IP address with the last block shortened (for example 93.228.151.0), date and time, the requested page, the status code, the amount of data transferred, the referring page and your browser. We use these entries to deliver the site, to detect faults and to defend against attacks. The legal basis is our legitimate interest in a secure and reliable website (Art. 6 (1) (f) GDPR). The log is rotated daily and deleted automatically by the hosting provider after a short period. We have concluded a data processing agreement with Mittwald under Art. 28 GDPR.

4. Contact form and email

If you contact us through the form or by email, we process the details you provide (name, company, email address, optionally phone and website address, the topics you tick, your message) to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR for a prospective contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering). The data is deleted once the enquiry is settled and no statutory retention periods apply.

The form is received by a small programme that runs on the infrastructure of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (see section 7). It checks the entries, filters automated submissions through a hidden field and sends the enquiry to us by email. Delivery is handled by Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) under a data processing agreement. The programme does not store your entries; Resend holds the email only for delivery and logs whether it succeeded.

5. Performance check

On the "Performance check" page you can enter the address of a website. The address is sent to the same programme at Cloudflare (section 7). It loads the public start page of that website together with its robots.txt and llms.txt files to rate technology, structure and readability. It also forwards the address to the PageSpeed Insights interface of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA), which measures the website with Lighthouse and returns scores, measured values and a screenshot of that website. Only the website address is transmitted to Google, no data about you.

We keep the result for each domain, including the screenshot, for 24 hours so that repeated requests do not trigger a new measurement; a link to a single run expires after one hour. Your IP address is used only to limit the number of requests per address (per minute and per day); for that it is stored for two days as a non-reversible hash, never in clear text. Before each measurement Cloudflare Turnstile checks that the request comes from a person; Cloudflare evaluates technical characteristics of your browser for this, without cookies and without puzzles. The Turnstile script is loaded only when you start a measurement. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a working, abuse-resistant service). If you then use the contact form, the address you checked is pre-filled; you can delete it.

6. No cookies, no tracking

This website sets no cookies and stores nothing in your browser. It uses no tools for audience measurement, no advertising networks and no embedded content from other providers. There is therefore no cookie notice; § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) does not apply. While the site is in preview, access is protected by a password that your browser remembers for the session; this involves no cookie and no profile.

7. Service providers and transfers to third countries

Hosting takes place in Germany (section 3). Three services involve a provider in the United States: the contact form and the performance check run at Cloudflare, Inc. (sections 4 and 5), the form's email is delivered by Resend, Inc. (section 4), and the performance check uses Google's PageSpeed Insights (section 5). Cloudflare and Google LLC are certified under the EU-U.S. Data Privacy Framework; the European Commission has recognised that framework as providing an adequate level of protection (Art. 45 GDPR). In addition, and for Resend, the EU standard contractual clauses (Art. 46 (2) (c) GDPR) apply as part of the providers' data processing terms. No other recipients receive your data unless we are legally obliged to disclose it.

8. Your rights

You have the right to access the personal data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of a legitimate interest, you may object at any time for reasons arising from your particular situation (Art. 21 GDPR). Please contact the address in section 2.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

9. Changes

We update this policy when the technology or the legal situation changes. Version: 28 October 2026. In case of doubt the German version applies.