Privacy Policy

This policy explains what personal data is processed when you visit joachimtantau.com or write to me, why, and what rights you have. The short version: the site sets no cookies, uses no analytics or tracking, and loads its fonts and scripts from its own server. A few pages fetch live data from outside services, as described below.

Who is responsible

Joachim Tantau
Tornescher Weg 80
25436 Uetersen
Germany
Email: info@joachimtantau.com
Phone: +49 (0)163 1768765

Hosting and server log files

This website is hosted by ALL-INKL.COM - Neue Medien Münnich, Friedersdorf, Germany. When you open a page, the server automatically records technical information that your browser sends: IP address, date and time of the request, the page requested, the referring page, browser type and version, and operating system. This is needed to deliver the site and keep it secure and stable (Art. 6(1)(f) GDPR). The log files are kept only for a short period and are not combined with other data. I have a data processing agreement with the host under Art. 28 GDPR.

All pages are transmitted over an encrypted connection (TLS), which you can recognise by "https" in the address bar.

Cookies, analytics and tracking

This website sets no cookies and uses no analytics, advertising or tracking tools. Fonts (Spectral and Cormorant Garamond, SIL Open Font License) and scripts are stored on this server, so viewing a page does not connect you to Google or other font or script providers.

Enquiry form and email

If you send an enquiry through the form or by email, I process the details you give me (name, email address, optionally a phone number, and your message) to answer you and, where relevant, to prepare an offer or carry out an order (Art. 6(1)(b) GDPR), or because I have a legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). The form sends your message to me by email through this website's server. I keep enquiries as long as needed to deal with them. Where a business relationship results, statutory retention periods for business correspondence apply (up to ten years under German commercial and tax law). I do not pass your details on to anyone else unless this is needed to fulfil an order, for example to a shipping company.

Live data on the Meridian and Cypher pages

The pages for the light sculptures Meridian and Cypher show live information. To do this, your browser requests data directly from the following services, which means they receive your IP address and the usual browser information:

• Exchange rates on the Meridian page: Frankfurter (api.frankfurter.dev) and, as a fallback, ExchangeRate-API (open.er-api.com).
• The latest Bitcoin block and the Bitcoin price on the Cypher page: mempool.space and, as a fallback for the price, CoinGecko (api.coingecko.com).

No personal data is sent beyond what is technically needed for the request. This is based on my legitimate interest in showing current figures on these pages (Art. 6(1)(f) GDPR). Some of these providers may process data outside the European Union.

Embedded videos

Some pages may show films hosted on Vimeo (Vimeo.com, Inc., New York, USA). When such a page loads the player, your browser connects to Vimeo's servers and Vimeo receives your IP address and browser information. The player is embedded with Vimeo's "do not track" setting, so Vimeo does not set tracking cookies. Data may be transferred to the USA. Vimeo states that it takes part in the EU-US Data Privacy Framework. The legal basis is my legitimate interest in presenting my work on film (Art. 6(1)(f) GDPR). Vimeo's own privacy policy applies: vimeo.com/privacy.

Links to social media

The Facebook, LinkedIn and Instagram icons are plain links. No data is sent to these platforms until you click one of them. After that, the platform's own privacy policy applies.

Your rights

You have the right to access the personal data I hold about you (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where you have given consent, you can withdraw it at any time with effect for the future. To exercise these rights, write to info@joachimtantau.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Kiel, datenschutzzentrum.de.

Changes

I update this policy when the website or the law changes. This version is from November 2026.