Privacy policy
Last updated: October 2026. This is a translation; the German version is authoritative.
1. Controller
Sebastian Hoppe, Schonlaublick 17, 33014 Bad Driburg, Germany
Email: info@s-hoppe.com, phone: +49 171 1826831
2. Summary
This website sets no cookies, uses no analytics or tracking scripts and loads no third-party content; fonts and images are served from the site itself. When you move between pages (e.g. German/English), the next page is loaded in the background from the same server. There is no contact form.
3. Hosting and delivery
The website is served via Cloudflare Pages by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary connection data: IP address, date and time, requested address, referrer, browser and device type, in order to deliver the site securely and reliably and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure and functioning website.
A data processing agreement with Cloudflare is in place (Art. 28 GDPR). Processing in the USA is possible; Cloudflare is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision, Art. 45 GDPR). According to Cloudflare, this connection data is kept only briefly for security and troubleshooting; I have no access to these logs and do not store them. The website is served exclusively over encrypted HTTPS (TLS).
4. Audience measurement
To understand how the website is found and used, I count page views on the server, without any script in your browser and without cookies. For each view I store: page and language, time, the domain of the referring site, a campaign tag from the link (e.g. "freelancermap"), the country (derived by Cloudflare from the IP address), the device class (phone, tablet, desktop) and whether the request is likely automated (bot). I also count downloads of the PDF CVs, clicks on links to profiles on other platforms (routed through a redirect on this site) and requests for non-existent pages including the requested address.
Your IP address and browser identifier are processed only briefly to determine country and device class and are not stored. I do not store identifiers that could recognise you on later visits, and I do not combine the data with other data.
The data is stored in a database at Cloudflare (see section 3) located in the EU and deleted automatically after 13 months. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is improving the website and seeing which channels bring visitors. For your right to object, see section 9.
5. Contact by email or phone
If you contact me by email or phone, I process your details (e.g. name, contact details, content of your enquiry) to handle your request. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. Emails are processed via Microsoft 365 (Microsoft Ireland Operations Ltd.) under a data processing agreement. Processing by Microsoft Corporation in the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework. I delete your details once the enquiry is settled and no statutory retention obligations apply.
6. Password-protected CV (cv.s-hoppe.com)
The full CV is available at cv.s-hoppe.com. The application (Reactive Resume) runs on my own server in Germany and is delivered via Cloudflare; section 3 applies accordingly. After you enter the password, the application sets a strictly necessary cookie that grants access for 10 minutes and then expires (§ 25(2) no. 2 TDDDG). The application counts views and downloads of the CV and stores the time of the last view, as plain counters without IP address or any other identifier; the counters are kept as long as the CV is provided. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is providing the CV in a protected way. This notice also applies to cv.s-hoppe.com.
7. Links to other websites
The website contains links to other websites, for example my profile on freelancermap and certificate badges. Data is transferred to these providers only when you click a link; their privacy notices then apply. A click on a profile link is counted as a view (section 4).
8. Provision of data and automated decisions
You are not obliged to provide any data; without the technically necessary connection data, however, the website cannot be delivered. There is no automated decision-making, including profiling (Art. 22 GDPR).
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Please use the email address above.
Right to object: Where I process data on the basis of Art. 6(1)(f) GDPR (sections 3 to 6), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal email to info@s-hoppe.com is sufficient.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.