Last updated: August 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Timothy White
c/o IP-Management #487
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Email: tim@thetrollbrain.com

2. General information on data processing

The protection of your personal data is important to me. Personal data means any information relating to an identified or identifiable natural person.

This website has been designed with data minimisation in mind. In particular, no analytics or marketing services are used. The website does not provide contact forms, comment functions, newsletter subscriptions or user registration for visitors.

Personal data is processed primarily where this is technically necessary to provide and secure the website.

3. Hosting and server log files

This website is hosted by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you access this website, the web server processes technical access data required for the operation of the website. Such data may include, in particular:

• the IP address of the accessing device;
• the date and time of access;
• pages or files accessed;
• browser type and browser version;
• operating system;
• referrer URL; and
• other technical information relating to the server request.

This processing is carried out in order to provide the website and to ensure its stability and security.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest consists in the secure, reliable and efficient provision of this website and in detecting and preventing attacks and misuse.

According to STRATO, IP addresses collected when the website is accessed are stored for a maximum of seven days for the purpose of detecting and preventing attacks.

The web server log files made available to the website operator contain anonymised host names or IP addresses. These log files are made available by STRATO for a period of six weeks.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with STRATO.

4. Access statistics

For the purpose of assessing the use of this website, only the server-side access statistics provided by the hosting provider STRATO are used. These statistics are based on access data generated during the operation of the web server.

No additional analytics or tracking services such as Google Analytics are used, and no additional tracking technologies are integrated into this website.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest consists in the technical and statistical assessment of the use and proper functioning of the website.

5. Cookies and similar technologies

Under the website’s current technical configuration, no cookies are used for analytics, marketing or advertising purposes during a normal visit to the website.

In particular, no tracking cookies or similar technologies are used to create user profiles.

Should functions be added in the future that require information to be stored on your device or access to information already stored on your device, this Privacy Policy will be updated accordingly and, where required by law, your prior consent will be obtained.

6. Fonts

The fonts used on this website are hosted locally and are provided directly by this website’s server. No connection to Google Fonts or a comparable external font provider is established when the fonts are loaded.

7. Data backups using Dropbox

Regular backups of the website and its database are created for data security and recovery purposes. These backups are stored using Dropbox.

For users outside North America, the service provider is:

Dropbox International Unlimited Company
One Park Place, Floor 5
Upper Hatch Street
Dublin 2
Ireland

As part of the backup process, data stored on the web server or in the WordPress database may be included in a backup.

The purpose of these backups is to ensure the availability, integrity and recoverability of the website, particularly in the event of technical failures, data loss or security incidents.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest consists in maintaining secure and reliable backups and ensuring that the website can be restored if necessary.

In connection with the provision of Dropbox services, data may also be processed by Dropbox, Inc. in the United States. Dropbox provides for recognised transfer mechanisms under European data protection law for transfers of European personal data, including the Standard Contractual Clauses adopted by the European Commission.

Backups are retained only for as long as necessary for backup and recovery purposes.

8. Recipients of personal data

Personal data is disclosed to third parties only where this is necessary for the provision, security or backup of this website or where disclosure is required by law.

Technical service providers used in connection with this website include, in particular, STRATO for hosting and Dropbox for data backups.

9. Retention periods

Personal data is generally retained only for as long as necessary for the respective purpose of processing.

Where a specific retention period is stated for a particular processing activity, that period applies. In all other cases, data will be deleted once the purpose for which it was processed no longer applies, unless statutory retention obligations or other legal grounds require or permit further retention.

10. Your rights

Subject to the applicable legal requirements, you have the following rights in relation to your personal data:

• the right of access pursuant to Art. 15 GDPR;
• the right to rectification pursuant to Art. 16 GDPR;
• the right to erasure pursuant to Art. 17 GDPR;
• the right to restriction of processing pursuant to Art. 18 GDPR;
• the right to data portability pursuant to Art. 20 GDPR; and
• the right to object pursuant to Art. 21 GDPR.

Where processing is based on your consent, you also have the right to withdraw that consent at any time with effect for the future.

To exercise your rights, you may contact me using the contact details provided above.

11. Right to object

Where personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to such processing at any time on grounds relating to your particular situation.

In the event of a valid objection, the personal data concerned will no longer be processed unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

12. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.

In particular, you may contact the supervisory authority responsible for the controller or a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

13. Changes to this Privacy Policy

This Privacy Policy may be updated if the technical services used, the processing of personal data on this website or the applicable legal requirements change.

The version currently published on this website applies.