Privacy policy

This is a translation for your convenience. The German version is the authoritative one.

Controller

Martin Müller
Martin Mueller Solutions
Humperdinckstr. 12
51375 Leverkusen
Germany

Email: info@martinmueller.solutions

Hosting and server logs

This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you access the site, the host processes technically necessary data, including your IP address, the time of access, the resource requested, and details about your browser and operating system. The legal basis is our legitimate interest in operating the site securely and reliably (Art. 6 (1) (f) GDPR). We do not combine this data with other sources; it is stored only for as long as operation and the defence against attacks require.

Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR). For transfers to the USA, Cloudflare relies on the European Commission's standard contractual clauses and is certified under the EU-US Data Privacy Framework.

Encrypted transmission

This website is served exclusively over an encrypted connection (HTTPS/TLS). You can recognise this by the padlock symbol in your browser's address bar. This also protects what you send through the contact form.

Fonts, maps and external links

The fonts used are served locally from this server; there is no connection to Google Fonts or any other external font provider. No map, video or booking system is embedded. This site links to external websites in a few places, for instance to a LinkedIn profile and to angulararchitects.io. Such links transmit data only once you click them. Third-party content is embedded at exactly one point, namely the spam protection of the contact form; see “Contact form” below.

Cookies and analytics

This website sets no cookies, embeds no analytics or tracking services and builds no usage profiles. There is no cookie banner for you to dismiss. The spam check on the contact form is not loaded at all until you tick the checkbox in the form. Until then, nothing is loaded from Cloudflare and nothing is stored. After that, the check stores a technical value in your browser's local storage (“cf.turnstile.u”, under the domain challenges.cloudflare.com). It remains there until you clear your browser storage, and it differs on every website. The legal basis for this access to your device is therefore your consent (§ 25 (1) TDDDG), which you can withdraw at any time by clearing the checkbox.

Contact form

If you use the contact form, we process the data you enter — your name, email address and message — in order to handle your enquiry. We need all three in order to reply; without them the form will not accept the enquiry. There are no other fields. You are under no legal or contractual obligation to provide the data: you can write to us directly by email instead. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into a contract, and otherwise our legitimate interest in answering it (Art. 6 (1) (f) GDPR).

The submission is received by a function running on Cloudflare Pages. For delivery we use Mailjet (Sinch Email, 13-13 bis rue de l'Aubrac, 75012 Paris, France). Processing takes place within the EU; a data processing agreement is in place. We delete your enquiry once it has been dealt with conclusively and no statutory retention obligations stand in the way.

To keep machines from misusing the form, we check every submission in two ways. First, the form contains a field that is invisible to humans. Second, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Turnstile checks in the background whether the submission comes from a human being.

In doing so, Cloudflare processes the following technical signals according to its own account: your IP address, the fingerprint of your encrypted connection (TLS), your browser identifier (user agent), and the identifier of our form together with the address of the page it sits on. Cloudflare states that these signals do not allow it to identify individuals directly. Your own entries — name, email address and message — are not transmitted to Cloudflare. We have not enabled the additional feature that would set a cookie for the check (“pre-clearance”). Without this check the form accepts no enquiry; in that case you can reach us using the contact details given above.

This processing has two sides, and they differ in law. Insofar as Cloudflare examines the signals in order to protect our form, Cloudflare acts as our processor under a data processing agreement; the legal basis is our legitimate interest in protecting the form and our mailbox from automated submissions (Art. 6 (1) (f) GDPR). Insofar as Cloudflare uses the same signals to improve its own bot detection, Cloudflare is itself the controller and, according to its own account, relies on its legitimate interest (Art. 6 (1) (f) GDPR). Data may be transferred to the USA in the process. Cloudflare states that it bases such transfers on its certification under the EU-U.S. Data Privacy Framework, supplemented by standard contractual clauses.

Your rights in relation to us are set out under “Your rights” below. For the processing Cloudflare carries out as its own controller, Cloudflare's data protection officer is responsible (dpo@cloudflare.com). Further details are in the Turnstile privacy notice and in Cloudflare's privacy policy, which applies in addition.

Enquiries by email

Instead of using the form, you can also write to us directly by email; several places on this website point that out explicitly. In that case we process your message together with the information it contains and your sender address in order to handle your enquiry. What you choose to tell us is up to you.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise our legitimate interest in answering it (Art. 6 (1) (f) GDPR). We delete your enquiry once it has been dealt with conclusively and no statutory retention obligations stand in the way; business correspondence of merchants is subject to retention periods of six or ten years depending on its content (§ 257 HGB, § 147 AO).

Our mailbox is hosted with Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA in the process; Google bases such transfers on the European Commission's standard contractual clauses and is certified under the EU-US Data Privacy Framework. Unlike the contact form, email is not encrypted end to end in transit; for confidential matters the form is the safer route.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time to processing based on a legitimate interest (Art. 21 GDPR). Please write to the address given above.

Irrespective of this, you may lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority here is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany.

Objection and withdrawal of consent

Your right to object: Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Withdrawing consent: Where you have given us consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). On this website that applies to the spam check on the contact form: you withdraw by clearing the checkbox. Processing that took place before the withdrawal remains lawful.

Version

This privacy policy is dated September 2026.