Legal notice & privacy

Privacy policy

Last updated: 24 October 2026. The controller is Stefan Hamann at the address and email listed in the legal notice.

Hosting and delivery

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes technical connection data such as your IP address, time, requested address, browser information and error data to deliver and secure the website. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a secure, accessible website. Technical logs are deleted under the hosting provider’s retention rules; security records may be needed longer to investigate an incident. Vercel privacy policy · Data processing terms and transfer safeguards.

Your choice and necessary storage

The sh-consent cookie remembers your choice and its time for 180 days. It contains no random visitor identifier. Your explicitly selected language is stored in ac-language for one year. This storage provides the choice you requested and is necessary under Section 25(2)(2) TDDDG. Processing your privacy choice is based on Article 6(1)(c) GDPR and our accountability obligations; the language feature is based on Article 6(1)(f) GDPR. All text and legal information remain readable without JavaScript; Analytics does not load in that case.

Optional reading features

If you allow reading preferences, your reading position and text size are stored only in your browser’s local storage: ac-reading-de, ac-reading-en and ac-reader-size. These values are not sent to third parties. The legal bases are your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Withdrawing consent deletes these values. You can also delete them in your browser settings. Without this consent, you can still read and change the text size for the current page.

Google Analytics

Only with your active consent do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We measure page views, the language of the page read, PDF and EPUB downloads, outbound link destinations, and the start and completion of the book video. Google processes cookie identifiers, browser and device information, usage times and an approximate geographic location. Your IP address is transmitted for technical communication; Google states that GA4 does not log or store it. We do not pass names, email addresses, form entries, URL parameters or section anchors. Referrers are reduced to the referring website’s origin.

Google Analytics is fully blocked until you consent. A rejection is not sent to Google either. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. After consent, Analytics uses the _ga and _ga_… cookies for a maximum of 180 days. Retention of individual user and event data in Analytics is limited to two months; aggregated reports can remain longer. Google Signals, personalized advertising and sharing for advertising purposes are disabled in our integration.

Processing by Google LLC and other subprocessors outside the EU, particularly in the US, is possible. Contractual safeguards for these transfers are described in the linked Google data processing terms. Google data processing terms · How Google processes data on partner sites · EU privacy in GA4.

Change or withdraw consent

You can change any optional consent at any time for the future through Privacy settings in the footer. When you withdraw consent, we stop Analytics and delete its cookies accessible to this website. Withdrawal does not affect processing that was lawful before it. Using the website does not depend on your consent.

Open privacy settings

Contact and external services

When you email us, we use your message and contact information to handle your enquiry under Article 6(1)(b) GDPR for contractual enquiries, or otherwise Article 6(1)(f) GDPR. Correspondence is deleted once the enquiry is resolved and no legal retention obligation applies. Fonts, images and videos are served locally. External services such as LinkedIn, GitHub or Amazon are only opened when you follow a link; their operators’ privacy policies then apply.

Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You may withdraw consent at any time. Contact sh@sh-future.de to exercise these rights. You may also complain to a data protection authority, in particular the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. LDI NRW.