Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Paul Schell
Trou aux Biches Road
21504, Trou aux Biches
Mauritius
Email: Clicking loads the Cloudflare Turnstile security service (privacy).

2. In brief

This website is a static information page. Without your consent, at most technically necessary cookies are set (see section 10). For privacy-friendly reach measurement I use Cloudflare Web Analytics (see section 4). Google Analytics is only loaded with your consent (see section 5). There is no contact form and no user account. My email address is only shown after a security check with Cloudflare Turnstile (see section 7). Personal data arises when the page is accessed (server log files), when you consent to statistics and when you contact me by email.

3. Hosting and server log files

This website is provided via Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare Workers is used to deliver the static files, together with the Cloudflare network and DNS. When you access the page, Cloudflare processes technically necessary data that your browser transmits automatically, in particular:

IP address
date and time of access
requested page or file
browser type, operating system and referrer URL
amount of data transferred

The purpose is to deliver the website, ensure stability and security, and prevent abuse and attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). The data is stored only as long as necessary for these purposes. Cloudflare processes the data on my behalf. For certain purposes, such as the security of its own network, Cloudflare may according to its own statements also act as an independent controller.

A data processing agreement pursuant to Art. 28 GDPR (Cloudflare Customer DPA) is in place with Cloudflare and forms part of the subscription agreement. Because delivery takes place through a global network, data may also be processed in the USA and in other countries outside the EEA. Transfers are safeguarded by appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular Cloudflare's certification under the EU-US Data Privacy Framework and, where necessary, standard contractual clauses. Further information is available in Cloudflare's privacy policy: cloudflare.com/privacypolicy.

4. Reach measurement with Cloudflare Web Analytics

For simple reach measurement I use Cloudflare Web Analytics, a service of Cloudflare, Inc. (address see section 3). For this, Cloudflare adds a small measurement script when delivering the page. According to Cloudflare, the service works without cookies and without storing information in the browser and does not build profiles of individual visitors. In particular, the pages viewed, the referrer, browser and device type, the approximate location (country) and page load times are recorded.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a privacy-friendly evaluation of usage and the technical quality of the website). For transfers to the USA, the information in section 3 applies accordingly. You can object to the processing under Art. 21 GDPR, for example by email to the address above or by using a tracking blocker in your browser.

5. Google Analytics (only with consent)

If you consent in the banner, I use Google Analytics 4, a web analytics service provided by Google. For users in the European Economic Area and Switzerland the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, otherwise Google LLC, USA. Without your consent, Google Analytics is not loaded and no connection to Google servers is made.

With your consent, cookies (e.g. _ga and _ga_<ID>) are set and data about your use is collected, such as pages viewed, time spent, referral source, browser, operating system, device type and approximate location. According to Google, IP addresses are not logged or stored in Google Analytics 4. I use the service solely to measure reach and improve the website, not for advertising purposes.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Storage duration follows the retention period configured in Google Analytics. A transfer to the USA is safeguarded by appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular Google LLC's certification under the EU-US Data Privacy Framework and standard contractual clauses. A data processing agreement is in place with Google. Further information: policies.google.com/privacy.

You can withdraw or renew your consent at any time with effect for the future: open cookie settings. If you withdraw, the Google Analytics cookies in your browser are deleted and no further data is sent.

6. Links to external services

This website contains links to external services (Cal.com, LinkedIn, GitHub, SymfonyConnect). Merely visiting my site does not transmit any data to these providers. Only when you click a link do you leave my website, and the privacy policy of the respective provider applies. When you book an appointment, you enter your details (e.g. name, email address, preferred time) directly with the booking provider. The provider is responsible for that data.

7. Showing the email address (Cloudflare Turnstile)

My email address is only shown after you click "Show email address" and pass a security check. For this I use Cloudflare Turnstile, a service of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). The service is only loaded after your click. It distinguishes humans from automated programs and is meant to prevent email addresses from being harvested in bulk and used for spam.

When the check is loaded and run, technical data is processed, in particular your IP address, browser and device information and signals about interaction with the page. The result of the check (a one-time token) is sent to my server and verified there with Cloudflare. According to Cloudflare, the data is not used for advertising purposes.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam and automated harvesting) and, where necessary for the display you requested, additionally Section 25(2) no. 2 TDDDG. For transfers to the USA, the information in section 3 applies accordingly. Further information is available in Cloudflare's privacy policy: cloudflare.com/privacypolicy.

8. Contact by email

If you write to me by email, I process your email address, the content of your message and any other details you provide in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). I delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

9. Fonts

The fonts used on this page are served from the same server. No connection to third-party font services is made.

10. Cookies and local storage

Without your consent, this website itself sets no cookies. I store your choice in the consent banner in your browser's local storage (localStorage, key consent) so the banner does not reappear on every visit. This is technically necessary (Section 25(2) no. 2 TDDDG). After you consent, Google Analytics sets cookies, see section 5. You can change your choice at any time: open cookie settings.

When protecting the website against automated access (Cloudflare bot protection and Turnstile), Cloudflare may set a cookie named cf_clearance in your browser. It remembers that your browser has passed a security check so the check is not repeated on every visit. The cookie is technically necessary for the security of the website (Section 25(2) no. 2 TDDDG; the legal basis for the data processing is Art. 6(1)(f) GDPR) and, according to Cloudflare, is used neither for advertising nor for analytics. Its validity is determined by Cloudflare according to the settings there and is usually short.

The security check when showing the email address (Cloudflare Turnstile) may use technically necessary cookies or temporary storage in your browser, see section 7. It is only loaded after you click.

11. Encryption

The website is transmitted in encrypted form via HTTPS (TLS).

12. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time. To exercise your rights, an email to the address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence, place of work or the place of the alleged infringement. For my location, Mauritius, the competent authority is the Data Protection Office.

13. Applicable law

I process personal data in accordance with the GDPR, where applicable, and with the Data Protection Act 2017 of Mauritius.

14. Changes

I will update this privacy policy if the website or the legal requirements change. Last updated: October 2026.