privacy policy

This website uses no cookies and no analytics, tracking or advertising services, and no social media plugins. The only thing it keeps in your browser is the scroll position of the pages you visit, in the session storage of the tab, so that back and forward return you to the same spot. This is technically necessary (§ 25(2) no. 2 TDDDG), never leaves your device and is deleted when you close the tab. Fonts, images, videos, scripts and the textures of the 3D viewers all come from this website's own server, so while you browse it your browser connects to no other server. Personal data is only processed in the server logs at the host and when you contact me.

The website is hosted by LeaseWeb Netherlands B.V., Hessenbergweg 95, 1101 CX Amsterdam, Netherlands, on servers in the Netherlands. LeaseWeb processes the data below on my behalf (Art. 28 GDPR).

Every time your browser requests a page or file, the server records:

• your IP address
• the date and time of the request
• the requested page or file, the response status and the amount of data transferred
• the page you came from (referrer)
• your browser and operating system (user agent)

I use these log files only to deliver the website, keep it secure and stable, and find errors. The legal basis is Art. 6(1)(f) GDPR: my legitimate interest in a secure, working website. The logs are not combined with other data and not used to identify visitors or build profiles. They are deleted once they are no longer needed for these purposes, unless a security incident has to be investigated.

The website is only delivered over an encrypted connection (HTTPS).

When you contact me by email, phone or Signal, I process the details you share, such as your name, email address or phone number and the content of your message, to answer your request. If your request concerns a commission, a purchase or another contract, the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR: my legitimate interest in answering inquiries. I delete inquiries that don't lead to an order at the latest two years after the last contact. I keep correspondence about orders and purchases as long as claims can be made from them, and at least for the statutory periods (six years for business letters, eight years for invoices).

Emails to info@mdt.re are received and stored on the mail server of the host named above.

Signal messages are end-to-end encrypted. Signal is operated by Signal Messenger LLC in the USA, and its own privacy policy applies to its use. Contacting me through Signal is optional: email and phone work just as well.

Some features work entirely on your device and send nothing to me or anyone else:

• the 3D viewers, including their screenshots, animation captures and OBJ, PDF and SVG exports
• the business card download (vCard) and the share button in the media kit
• on the English home page, a short script that reads the preferred languages of your browser and, if you prefer German or Dutch, shows you that version. It stores nothing.

Some pages link to other websites, such as GitHub, Signal, crates.io and npm. Nothing is loaded from them until you follow a link. After that, the privacy policy of the website you visit applies.

Regarding your personal data, you have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)

An email to info@mdt.re is enough to exercise them.

You can also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, lfd.niedersachsen.de.

You are not obliged to provide personal data. Without the connection data in the server logs, however, the website cannot be delivered, and without contact details I cannot reply to you. No automated decision-making or profiling takes place.