Privacy policy

This is a courtesy translation. Only the German version is legally binding.

Last updated: October 2026

1. Data protection at a glance

This website is deliberately built to process as little data as possible. We do not set any cookies ourselves, do not use any analytics, tracking or advertising services and do not embed any content from third-party servers, so there are no external fonts, maps, videos or social media plugins. Graphics and animations are our own work.

We only process personal data to the extent that it arises technically when the website is accessed, or when you contact us yourself, for example via the contact form, by email or by phone. This is governed by the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller

David Martin Enterprises
Owner: David Martin
Westbahnhofstr. 10
07745 Jena, Germany
Phone: (+49) 15679 523209
Email: [email protected]

3. Hosting and server log files

This website is hosted on the servers of a hosting provider (netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany), which processes the data on our behalf (Art. 28 GDPR). When the website is accessed, the server automatically stores information that your browser transmits:

• IP address of the requesting device
• date and time of access
• page or file accessed
• referrer URL, that is, the page visited previously
• browser type, browser version and operating system
• amount of data transferred and status code

This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and without errors, in particular in defending against attacks. The log files are deleted automatically in line with the hosting provider’s retention periods.

4. Cloudflare

This website uses the content delivery network and the security features of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to this website pass through Cloudflare servers. In the process, your IP address, the address accessed, the date and time, the browser identifier and technical connection data in particular are processed in order to deliver the website quickly and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably. We have concluded a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework. The transfer to the USA is based on the adequacy decision of the European Commission (Art. 45 GDPR).

If Cloudflare’s bot protection is active, Cloudflare may set the cookie ‘__cf_bm’. Its sole purpose is to distinguish humans from automated access. It is technically necessary to protect the website (Section 25(2) no. 2 TDDDG) and is deleted after 30 minutes at the latest. To protect against spam, Cloudflare displays our email address on the website in encrypted form. A small script makes it readable only in your browser.

Further information can be found in Cloudflare’s privacy policy.

5. Contact form

Via the contact form, we collect your name, your email address and your message as mandatory information. Company, phone number and topic are optional. The details are sent to us by email and processed there. Sending and the mailbox are also handled by the hosting provider named in section 3. We do not store them in a database, and we do not pass them on to third parties.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or to pre-contractual measures, and Art. 6(1)(f) GDPR in all other cases. Our legitimate interest lies in handling the enquiries addressed to us. We delete your details as soon as your enquiry has been dealt with, unless statutory retention obligations prevent this.

Spam protection

To protect the form against automated submissions, we only use our own technical measures. We do not use cookies or third-party services for this, in particular not Google reCAPTCHA.

• A signed timestamp shows whether the form is submitted unrealistically quickly or after a very long time.
• Your browser solves a small computational task that you do not notice. No data about you is collected in the process.
• A field that is invisible to humans detects automated programs.
• To limit the number of messages per sender, we use a secret key and a value that changes daily to create a shortened checksum from your IP address (for IPv6, from the first part, the /64 network). The IP address itself is not stored. Without the secret key, it cannot be derived from the checksum.
• To detect bulk submissions, we store a shortened checksum of the message text, combined with the email address in the case of short messages. Neither the text nor the address can be recovered from the checksum.
• The message is automatically checked for typical spam characteristics, such as many links, HTML code or known advertising terms. Your browser also counts how often the message field changes as a result of input. What you write is not recorded in the process. Suspicious messages reach us with a note or are discarded.
• Using a DNS query, we check whether a mail server exists for the domain of your email address. Only the part after the @ is queried.

Checksums and timestamps are deleted after 24 hours at the latest. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security and proper functioning of the form.

6. Contact by email or phone

If you contact us by email or phone, we process the information you provide in order to deal with your request. Emails to us are stored on the mail servers of the hosting provider named in section 3. The same legal bases and deletion rules apply as for the contact form.

7. Cookies, local storage and third-party content

We do not set any cookies. The only exception is the Cloudflare security cookie described in section 4, if bot protection is active. There is no analytics, no audience measurement and no advertising.

The website appears light or dark depending on your device settings. If you change the display yourself using the switch with the moon or sun symbol in the header, your browser saves this choice in local storage (localStorage) under the name ‘dme-theme’. The entry does not leave your device, is not transmitted to us and can be deleted at any time in your browser settings. The legal basis is Section 25(2) no. 2 TDDDG, because storing it is strictly necessary for the function you have expressly requested.

The fonts ‘Fira Sans’ and ‘Fira Sans Condensed’ are stored on our own server and are loaded from there. There is no connection to Google Fonts or other font providers.

The photos are from Unsplash. They are stored on our server and delivered from there. No data is transmitted to Unsplash when you visit the website.

8. Links to other websites

The website contains links to other websites, for example to sources. Data is only transmitted when you click a link. From then on, the privacy policy of the respective provider applies.

9. SSL and TLS encryption

This website uses SSL or TLS encryption. You can recognise an encrypted connection by ‘https://’ in your browser’s address bar and by the padlock symbol.

10. Your rights

Within the scope of the statutory provisions, you have the following rights at any time:

• access to the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

An informal email to [email protected] is sufficient.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI), www.tlfdi.de.

12. Changes

We update this privacy policy when the website or the legal requirements change. The version published here at the time applies.

Back to the home page