privacy

short version: this site sets no cookies, runs no analytics, and shows no ads. we only process personal data if you actively give us your email address — and even then, only to send you the files.

1. who is responsible

Christian Kastner, contact: info@christiankastner.de. Postal address: see imprint. (Controller within the meaning of Art. 4(7) GDPR.)

2. hosting (server logs)

this site is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA — with EU data processing addendum and standard contractual clauses). when you visit, Cloudflare technically processes your IP address and request metadata to deliver the site and to protect it from attacks. this is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). we do not receive or store personal server logs ourselves.

3. email sign-up (double opt-in)

if you enter your email address to get new files by email, we process it on the basis of your consent (Art. 6(1)(a) GDPR). we use double opt-in: you receive a confirmation email first, and only after you click the confirmation link are you subscribed. we log the confirmation to be able to prove consent (Art. 7(1) GDPR).

confirmation and file emails are sent via Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA), acting as our processor under an Art. 28 GDPR data processing agreement with EU standard contractual clauses. the subscriber list itself and the double-opt-in consent log are kept in our own infrastructure (Cloudflare, see section 2, and our internal records).

every email contains an unsubscribe link. you can withdraw your consent at any time — by unsubscribing or by emailing us. your address is then deleted from the list.

4. embedded videos (youtube)

video embeds on this site are click-to-load: no connection to YouTube is made until you actively click play. when you click, the video loads via youtube-nocookie.com (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), and YouTube may process your IP address and set device storage as described in Google's privacy policy. legal basis: your consent by clicking play (Art. 6(1)(a) GDPR).

5. downloads

PDF downloads are served as plain static files — no sign-up, no tracking.

6. your rights

under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). you can also lodge a complaint with a supervisory authority (Art. 77). to exercise any of these rights, email info@christiankastner.de.

last updated: 2026-07-24