Privacy Policy

I take the protection of your personal data seriously. On this page, I explain in clear and simple terms which data is processed when you visit my website or contact me.

Controller

Mihaela Jarema – Clean CoDE Dojo
Schellingstr. 109a
80798 München
Germany
Email: mihaelajarema@cleancodedojo.dev

Email Contact

If you send me an email, I store your message and your contact details so that I can reply. I do not share this information with third parties.

Retention periods

Emails relevant for accounting: 10 years (statutory requirement)
All other emails: kept as long as they are relevant for our business relationship. I review stored emails regularly.

(Legal basis: Art. 6(1)(f) GDPR – legitimate interest in responding to inquiries)

Hosting and Access Data

My domain and email infrastructure are provided by Infomaniak (Switzerland). Infomaniak processes only my own account and contract data. It does not process personal data of website visitors.

The website itself is hosted by Hetzner (Germany), acting as a data processor. When you access the website, technical data is automatically processed by the web server – for example: IP address, time of access, pages viewed, browser type. This data is used solely to provide the website and ensure its security. It is not used for marketing or profiling.

Retention period: Server logs are automatically deleted after a maximum of 30 days.

(Legal basis: Art. 6(1)(f) GDPR – legitimate interest in the secure operation of the website)

Content Delivery Network

To make my website fast and reliable, I use the Content Delivery Network (CDN) provided by Bunny.net (Slovenia). Static files are delivered through servers located in the EU. Bunny.net acts as a data processor.

I have configured Bunny.net so that:

only EU servers are used (“EU only” routing filter)
no data is transferred to third countries
access logs are stored for a maximum of 3 days to detect technical issues and ensure website security
IP addresses are anonymized
no cookies are set
no profiling or tracking takes place

(Legal basis: Art. 6(1)(f) GDPR – legitimate interest in the secure and stable delivery of the website)

Embedded Content

My website may contain YouTube videos. To protect your privacy, I use a two-click solution: No connection to YouTube is made when the page loads. Only when you actively click “Click to load the video” will the video be embedded. From that moment on, YouTube's privacy policy applies. Using this feature is entirely optional – if you don't click, no connection is established and the video will not play. I do not receive any personal data from YouTube through my website.

(Legal basis for displaying the button: Art. 6(1)(f) GDPR – legitimate interest in providing video content)

My website contains links to external platforms (YouTube, LinkedIn). These are simple links – no content from these platforms is embedded, and no connection is made when the page loads. Only when you click a link do you leave my website. The privacy policies of the respective platforms then apply. I do not receive any data from these providers.

You can voluntarily sign up for my newsletter on my website, through which I share courses and blog posts on sustainable software and data practices, along with practical tips and insights in every issue.

If you enter a valid email address, actively check the consent box ("I agree to receive the Clean CoDE Dojo newsletter. I can unsubscribe at any time."), and click "Sign up," your email address is sent server-side to my email service provider, Brevo GmbH, Köpenicker Str. 126, 10179 Berlin. No connection to Brevo is made simply by visiting the page. Brevo acts as a processor.

After signing up, you'll receive a confirmation email from Brevo with a confirmation link (double opt-in). Only once you confirm are you added to the list and start receiving the newsletter. This process proves that the signup genuinely came from you and helps prevent abuse by third parties.

Without providing an email address and actively checking the consent box, you cannot sign up; without confirming via the link in the confirmation email, you will not receive the newsletter. You can withdraw your consent at any time, with effect for the future, by using the unsubscribe link in every newsletter email or by contacting me directly.

I have configured the newsletter subscription so that:

open and click behavior is only ever evaluated anonymously, both to check delivery quality and to understand which content resonates with readers
there's no profiling or personal analysis of your usage behavior
the only exception is the delivery log for the double opt-in confirmation email, which Brevo retains together with the recipient's address and timestamp – kept specifically as proof of your consent

(Legal basis: This processing relies on your consent under Art. 6(1)(a) GDPR, given through the double opt-in process)

Until you unsubscribe: your data is kept for the duration of your subscription, so I can send you the newsletter
After unsubscribing: your contact isn't deleted, but placed on a suppression list to prevent accidentally contacting you again (legal basis: legitimate interest, Art. 6(1)(f) GDPR)
Upon explicit deletion request: complete deletion
Transactional email logs: automatically deleted after 6 months
After my contract with Brevo ends: your data is deleted or anonymized in accordance with the Data Processing Agreement with Brevo.

No Cookies, No Tracking

I don't use cookies, analytics tools, or social media plugins on my website. I also don't load any tracking or analytics scripts that transmit personal data for marketing or profiling purposes – the only exception is YouTube videos, which you load yourself by clicking (see above). This doesn't cover the technical data transfers involved in simply delivering website content, such as through the CDN described above.

No User Accounts

My website currently does not include: user accounts, registration or comment functions.

Your Rights

You have the right to request access, correction, deletion, restriction of processing and data portability, as well as to object to processing, and to withdraw any consent you've given at any time. To exercise these rights, simply send me an email. I'll need sufficient information to verify your identity – without it, I unfortunately won't be able to process your request.

Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach
www.lda.bayern.de

Applicable Law

This website is operated by a German business. The processing of personal data is governed by the GDPR and German data protection law. German law applies. Mandatory data protection rules of your country of residence remain unaffected.

Changes to This Privacy Policy

I update this privacy policy when my website or legal requirements change. The current version is always available on this page.