PRIVACY

Controller within the meaning of Art. 4 no. 7 GDPR:

COONVO, LLC

• ✳530-B Harkle Road, STE 100
• ✳Santa Fe, NM 87505
• ✳USA

Email: [email protected]

This blog processes as little personal data as technically possible. There is: no tracking, no analytics or advertising services (no Google Analytics or similar), no external fonts or CDNs, no profiling and no resale of data. Personal data only arises at the points described below.

No cookies are set. Only your theme preference (day/night) is stored locally in your browser (localStorage). This is functionally necessary and permitted without consent under § 25 (2) no. 2 TDDDG. No third party can access this information. The notice banner on your first visit informs you about this — no consent is required because only strictly necessary storage is used.

The hosting provider automatically collects and stores information in server log files, which your browser transmits automatically: IP address, date and time of the request, time zone difference, content of the request, access status, amount of data transferred, referrer URL, browser and operating system.

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in the technically error-free display and the security of this offering). This data is not merged with other data sources. Log data is deleted after 30 days at the latest.

When you leave a response under a note, the following data is processed: name (optional — if omitted, "Anonymous" is shown), email address (optional, strictly confidential and never published), the comment text, and the date and time of submission. For spam protection, the IP address is used for a time-limited request rate limit (hash-based, Art. 6 (1) lit. f GDPR).

• ✳The legal basis for storage and publication is your consent (Art. 6 (1) lit. a GDPR), which you confirm explicitly via the privacy link. You may withdraw it at any time, effective for the future.
• ✳Every response is manually reviewed before publication (moderation). Until approval it remains stored non-publicly.
• ✳Your email address is never published, never shared and never used for advertising. It serves only for optional contact by the author.
• ✳The response is stored until you request deletion; you can ask for a published response to be removed at any time by emailing [email protected] with a reference to the note.

This blog offers no newsletter, no subscriptions and no automated email deliveries. No subscriber list exists. The only email ever sent is a reply to a request you explicitly made (Art. 6 (1) lit. b or lit. f GDPR).

The blog runs on managed cloud infrastructure (Managed cloud hosting — commissioned processing agreement per Art. 28 GDPR). The hosting provider processes personal data only on the operator's instructions; a data processing agreement per Art. 28 GDPR is in place.

The operator is a company based in the USA. Where personal data is transferred to third countries (in particular the USA), this is based on the EU Commission's adequacy decision for the EU-US Data Privacy Framework of 10 July 2023 or — where that is not applicable in an individual case — on suitable safeguards under Art. 46 GDPR (in particular standard contractual clauses) plus additional technical protective measures.

Personal data is stored only as long as necessary for the respective purposes or as required by statutory retention obligations. Once the purpose ceases to apply, the data is deleted or blocked unless legal obligations require longer storage.

You have the following rights regarding personal data concerning you:

• ✳Right of access (Art. 15 GDPR),
• ✳Right to rectification (Art. 16 GDPR),
• ✳Right to erasure (Art. 17 GDPR),
• ✳Right to restriction of processing (Art. 18 GDPR),
• ✳Right to data portability (Art. 20 GDPR),
• ✳Right to object to processing (Art. 21 GDPR),
• ✳Right to withdraw given consent with effect for the future (Art. 7 (3) GDPR),
• ✳Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

To exercise your rights, simply email [email protected].

This site uses TLS encryption (https) for security reasons. Data you transmit to this blog cannot be read by third parties.

No profiling and no automated decision-making, including automated individual decisions within the meaning of Art. 22 GDPR, takes place.

This privacy declaration is current as of 2026-11-02. Further development of the offering or changed legal requirements may make it necessary to adapt it. The version published on this page applies. The German version of this declaration prevails.