Privacy

Privacy

kardos.dev is deliberately small in terms of data collection. Optional Google Analytics is used only after consent. There is no advertising tracking, no contact form and no externally hosted font service.

1. Controller

Laszlo Kardos
Zamenhofstraße 9
01257 Dresden, Germany

For privacy-related enquiries, use the protected email address on the Contact page.

2. Hosting and delivery

The website is delivered through Cloudflare infrastructure. When a website is requested, technical data such as IP address, date and time, requested resource, browser information and security-related request data may be processed as necessary to deliver the site, maintain reliability and protect it from abuse.

The legal basis for necessary technical processing is the legitimate interest in the secure and reliable operation of this website, where applicable under Article 6(1)(f) GDPR.

Cloudflare may use JavaScript Detections as part of its bot and abuse protection. This can load a security script from a path under /cdn-cgi/challenge-platform/ and may set a cf_clearance cookie containing the result of the security check. These mechanisms are used for website security and abuse prevention, not for advertising.

Where storage in or access to information on your device is strictly necessary to provide and protect the digital service you requested, it is used on that necessary basis. Cloudflare's own privacy and data-processing terms apply to its infrastructure processing.

3. Optional Google Analytics

kardos.dev can use Google Analytics 4, provided by Google Ireland Limited, to understand how visitors find and use the website. Analytics measurement is disabled by default. In normal browsing, the Google Analytics library is not loaded unless you choose “Accept analytics”.

If you consent, analytics storage may be used to measure page views, traffic sources and selected interactions such as venture, social or contact-intent clicks. Advertising storage, ad user data and ad personalisation remain disabled by this website.

When I deliberately start a Google Tag Assistant debugging session, the Google tag may load in a consent-denied diagnostic state so the implementation can be tested. This technical debug mode does not enable analytics storage or normal page-view measurement unless analytics consent is granted.

The legal basis for optional analytics is your consent under Article 6(1)(a) GDPR and, where applicable, the consent requirements for storing or accessing information on your device. You can reject analytics without losing access to the website and can change your choice at any time using “Analytics settings” in the footer.

Google may process analytics data on infrastructure outside the European Economic Area subject to the transfer safeguards available for the relevant processing. Google's own privacy and data-processing terms apply to its service.

4. Local fonts

The fonts used by the website are served from the same website. Your browser does not need to contact Google Fonts or another external font provider to render the page.

5. Local preferences

If you switch between light and dark mode, the selected preference is stored locally in your browser using localStorage. The value is used only to remember the visual theme and is not transmitted to me as part of a tracking profile.

Your analytics choice is also stored locally so the website can remember whether you accepted or rejected optional analytics. This preference is necessary to respect your choice and does not itself create an analytics profile.

6. Protected contact reveal

The Contact and Imprint pages do not contain a contact form. Protected contact details are assembled in your browser only after you request them. Revealing or copying an address, or revealing the telephone number, does not by itself send a message, place a call or transmit form data to kardos.dev.

If you choose to send an email, the information you provide is processed for handling your enquiry. Depending on the subject, the legal basis may be steps taken at your request before entering into a contract under Article 6(1)(b) GDPR or legitimate interests under Article 6(1)(f) GDPR.

7. External links and social profiles

This site links to third-party websites, including LinkedIn, X and the websites of current ventures. Data is not sent to those services merely because a plain link is displayed. Their own privacy terms apply when you choose to follow a link.

8. Retention

Technical records are retained only for as long as required for security, delivery, troubleshooting and applicable legal obligations. Correspondence is retained only as long as necessary for the enquiry, an ongoing business relationship or legal record keeping requirements.

9. Your rights

Subject to the conditions of applicable data protection law, you may have rights of access, rectification, erasure, restriction, data portability and objection. You may also lodge a complaint with the competent data protection supervisory authority.

10. Changes to this notice

This notice may be updated when the website, hosting setup or data processing changes. The version published on this page is the current version.