Privacy Policy
This website is deliberately data-minimising and cookieless. It loads no analytics, no advertising trackers, and no content from third-party providers (such as web fonts from Google Fonts). The German version is legally authoritative.
1. Controller
The controller within the meaning of the GDPR is:
Phaneia GmbH
Kolonnenstraße 8
10827 Berlin, Germany
Email: info@phaneia.com
2. Hosting and delivery via Cloudflare
This website is delivered as a static site through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access the site, Cloudflare processes technically necessary connection data at its edge servers — in particular your IP address, the time of the request, the requested resource, the volume of data transferred, and the user agent — in order to deliver the content and to ensure the security and availability of the service.
The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6(1)(f) GDPR).
An Art. 28 GDPR data processing agreement with Cloudflare is in place (Cloudflare's Data Processing Addendum, which forms part of the self-serve agreement from acceptance).
Transfer to the USA
Processing may also take place on servers in the USA. Cloudflare is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies to transfers to the USA (Art. 45 GDPR).
Cookies / strictly necessary security functions
This website sets no cookies. Cloudflare security features that would set cookies (such as bot management or challenge mechanisms) are not enabled. Should such strictly necessary security cookies be enabled in future, this will be based on § 25(2) TDDDG, as they are strictly necessary for the operation of the service; this statement will then be updated accordingly.
3. Server log files
The connection data arising during delivery (see section 2) is processed by Cloudflare for security and operational purposes and retained only for the period necessary for that purpose. We ourselves run no further log-file analysis.
4. No analytics, no tracking, self-hosted fonts
We use no web analytics or audience measurement whatsoever. The fonts are part of the website and are delivered with it through Cloudflare (see section 2); they are not loaded from third-party providers such as Google Fonts.
5. Links to other websites
This website links to external sites, such as LinkedIn and doi.org (which forwards to Zenodo). No data is transferred to these providers unless you click a link; their privacy policies then apply. Your browser sends only our domain (phaneia.com), not the page you came from.
6. Contacting us by email or phone
If you contact us by email or phone, we process the data you provide in order to handle your enquiry (Art. 6(1)(b) GDPR where the enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR). We deliberately offer no contact form.
Our email is hosted with Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Microsoft processes it as our processor under Art. 28 GDPR; where data is transferred to the USA in the process, Microsoft is certified under the EU-US Data Privacy Framework. Beyond that, we pass nothing on to third parties.
We keep your message and the related correspondence for as long as handling your enquiry, and any follow-up questions about it, requires, and delete it afterwards. Statutory retention duties take precedence: where an enquiry becomes a business transaction, the commercial and tax retention periods apply (§ 257 HGB, § 147 AO).
7. Your rights
You have the following rights vis-à-vis the controller:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
Right to object
Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to info@phaneia.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, BlnBDI), Alt-Moabit 59–61, 10555 Berlin. You may also contact the authority where you live.
You are under no statutory or contractual obligation to provide personal data; without the connection data, however, the website cannot be delivered. No automated decision-making, including profiling (Art. 22 GDPR), takes place.
Last updated: October 2026