Privacy policy

Last updated: 9 September 2026.

Controller

Nico Jahn
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany

Email: contact@nicoja.hn
Phone: +49 175 8989393

Website delivery and security

This static website is delivered through Amazon CloudFront. Its files are stored in a private Amazon S3 bucket in AWS region eu-central-1 (Frankfurt). Amazon Web Services EMEA SARL and affiliated AWS companies process connection data, including IP address, timestamp, requested resource, HTTP headers, and technical browser information, to deliver and protect the website. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is reliable and secure website operation. AWS processes this data on my behalf.

The primary storage and application-processing region is eu-central-1. CloudFront is a global content-delivery network, so technical delivery data may also be processed at CloudFront edge locations outside the EU/EEA. The AWS Data Processing Addendum applies to customer data processed through AWS services; where necessary, its Standard Contractual Clauses and supplementary safeguards apply. Further information is available in the AWS Data Processing Addendum.

CloudFront standard and real-time access logging are not enabled. The website does not use a separate visitor-profiling database.

Browser storage

The site stores a display preference in local storage only when you select a color scheme. This is necessary to provide the requested setting (section 25(2) no. 2 TDDDG). It remains stored until you change it or clear your browser storage. The site uses no optional marketing or tracking cookies and no service worker for persistent content caching. A technical retirement file removes any service-worker and cache installation left by an older version of the website.

The AWS delivery components do not use additional browser storage.

MCP endpoint for AI tools

The public MCP endpoint makes this website's content available to compatible AI tools. API Gateway and AWS Lambda process the JSON-RPC request in eu-central-1, in particular its method, request ID, and tool inputs such as search terms, document paths, language filters, and result filters. AWS Lambda reads the public documentation from Amazon S3 in the same region. The purpose is to list, search, and deliver the publicly available documentation.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is providing my public content in a machine-readable form. The MCP endpoint does not store inputs in an application database, create user profiles, or transmit inputs to an AI model. API Gateway access logging is not enabled and the Lambda function is designed not to log request inputs. Technical Lambda runtime logs may be generated in Amazon CloudWatch to operate and troubleshoot the endpoint. Do not include personal, confidential, or secret information in MCP requests.

Contact by email

When you contact me by email, I process your message, contact details, and the additional information needed to handle the enquiry. This is done to take steps toward or perform a contract under Art. 6(1)(b) GDPR or, for other enquiries, under Art. 6(1)(f) GDPR. The legitimate interest is handling business communication.

The mailbox is provided through Google Workspace, a business email service of Google Ireland Limited and related Google companies. Processing in the USA may rely on the EU-US Data Privacy Framework or, where applicable, appropriate safeguards under Art. 46 GDPR. Further information is available in Google's privacy policy. General email enquiries are deleted 12 months after the last substantive communication. Statutory retention duties or legal-defense interests may require longer retention.

Contact by phone

When you call, I process data including your phone number, the time and duration of the call, and the information you provide. My telecommunications provider processes connection data needed to establish the call. Calls are not recorded. The legal bases and deletion criteria are the same as for business communication described above.

Contact by post

Mail sent to the c/o address stated in the Impressum is accepted, opened, digitized, and made available in a protected Anschrift.net customer account by COCENTER GmbH, Koppoldstr. 1, 86551 Aichach, Germany. This processing includes sender and recipient data, shipment information, and the content of the letter. COCENTER processes the mail content on my behalf. I receive an email notification when new mail is available.

The legal basis is Art. 6(1)(b) GDPR for contract-related correspondence and Art. 6(1)(f) GDPR for other correspondence. The legitimate interest is reliable receipt and handling of business mail while protecting the private residential address. According to Anschrift.net, scans remain available until the customer account is closed or deletion is requested; originals are retained for six months. Statutory retention duties and legal-defense interests may prevent earlier deletion. Further information is available in Anschrift.net's privacy policy.

Contact by email, phone, or post is voluntary. Without the information required to handle your enquiry, I may be unable to answer it or take steps toward or perform a contract.

Your rights

Subject to the statutory conditions, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), and data portability (Art. 20). You may withdraw consent at any time with future effect (Art. 7(3)). Contact the email address above to exercise these rights.

Right to object

Where processing is based on Art. 6(1)(f) GDPR, you may object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

No solely automated decision-making with legal or similarly significant effects takes place (Art. 22 GDPR).