Privacy Policy

Information under Art. 13 GDPR · Last updated: 16 August 2026

Auf Deutsch: Dies ist eine Übersetzung zur Erleichterung des Verständnisses. Rechtlich verbindlich ist ausschließlich die deutschsprachige Fassung. Bei Abweichungen gilt der deutsche Text.

1. Controller within the meaning of the GDPR

The controller for data processing on this website is:

Further details are available in the imprint.

2. Data protection officer

A data protection officer is not required by law (§ 38 BDSG: fewer than 20 people are permanently engaged in the automated processing of personal data; no special categories of personal data within the meaning of Art. 9 GDPR). For any data protection question, please contact the controller named above directly.

3. General information on data processing

As a matter of principle, we process our visitors' personal data only to the extent necessary to provide a functioning website and our content. The legal bases are in particular Art. 6(1)(f) GDPR (legitimate interests) and § 25 TDDDG (protection of privacy in terminal equipment).

4. Hosting via GitHub Pages (third-country transfer, USA)

This website is delivered via the GitHub Pages service. The provider is GitHub, Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA - a subsidiary of Microsoft Corporation.

Each time a page is requested, your browser automatically transmits data to GitHub's servers, where it is stored in what are known as server log files. This typically includes:

• the IP address of your device
• the date and time of access
• the URL requested and the referrer
• the browser type and version used
• the operating system used

Purpose: technical provision of the website, maintaining stability and security, protection against misuse and attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable, secure and low-cost delivery of this open-source project page.

Third-country transfer: GitHub also processes data in the USA. The USA is a third country within the meaning of the GDPR. The transfer takes place on the basis of the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework, Decision 2023/1795); Microsoft Corporation, GitHub's parent company, is certified under the Data Privacy Framework. In addition or in the alternative, standard contractual clauses under Art. 46(2)(c) GDPR (Implementing Decision 2021/914/EU) apply. Despite these safeguards, it cannot be entirely ruled out that US security authorities may access data on the basis of US law (in particular FISA 702, CLOUD Act).

Storage period: the retention period for the server logs is determined by GitHub. We ourselves have no direct access to this log data. Further information is available in GitHub's privacy statement: docs.github.com/site-policy/privacy-policies/github-general-privacy-statement.

5. Storage in local browser storage (localStorage)

So that your display preferences persist across page views, the website stores the following values in your browser's localStorage:

Legal basis: § 25(2) no. 2 TDDDG. Storing these preferences is strictly necessary in order to provide the telemedia service you have expressly requested - namely displaying the website in the language and colour scheme you selected. Consent is therefore not required. These values are not transmitted to third parties or to any server.

How to delete these values: via your browser settings under "Delete site data" / "Cookies and other site data", or via the developer tools (Application → Local Storage → yuvomi.cloud).

Note: earlier versions of this website used the keys oikos-theme and oikos-lang. These are still read until you switch language or colour scheme again.

6. No cookies, no tracking, no analytics, no external requests

This website does not use cookies in the legal sense. In particular, it uses no analytics or tracking services (e.g. Google Analytics, Matomo, Plausible), no marketing pixels (e.g. Meta, TikTok, LinkedIn pixels), no social media embeds and no reCAPTCHA.

No fonts are loaded at all: the pages use only the system fonts already present on your device. Google Fonts is not included. No external service is contacted when a page is opened - any figures shown (for example the number of GitHub "stars") are embedded statically into the page before publication, so your browser does not need to establish a connection to any third party for them.

7. Contacting us by email

If you contact us by email, we process the personal data contained in the email (sender address, content) for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). We delete the data as soon as it is no longer required to achieve that purpose and no statutory retention periods (e.g. § 257 HGB, § 147 AO) prevent deletion.

8. Recipients of personal data

The recipient of your personal data is:

• GitHub, Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA - as hosting provider (server logs).

No transfer to further third parties takes place unless we expressly state otherwise elsewhere in this policy.

9. Storage period

We store personal data only for as long as is necessary to achieve the purposes described, or for as long as statutory retention obligations require. Values in localStorage remain on your device until you delete them yourself.

10. Your rights as a data subject

You have the following rights in respect of the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the contact address above is sufficient.

Right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is:

12. Obligation to provide data

You are under no contractual or statutory obligation to provide personal data. However, without the transmission of the technically required data (see section 4) this website cannot be delivered to you.

13. Automated decision-making and profiling

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

14. Currency and amendment of this privacy policy

This privacy policy is currently valid and was last updated on 16 August 2026. Changes to the website or to legal requirements may make it necessary to amend this policy. The current version is always available at https://yuvomi.cloud/privacy.html.