- Home
- Data protection
Legal
Data protection
Last updated: 24 September 2026
1. Controller
Peter Bényei
30173 Hannover
Germany
Email: hello@peterbenyei.com
2. Hosting and server logs
This website is hosted by IONOS. When the website is accessed, IONOS processes technically necessary access data, including the requested page or file, date and time, browser type and version, operating system, device type, referrer and an IP address anonymised at collection. Processing is necessary to deliver the website and ensure its secure, stable and fault-free operation. The legal basis is Article 6(1)(f) GDPR.
The recipient and processor is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS states that web-hosting visitor data is retained for eight weeks. Further information is available in theIONOS web-hosting data-processing informationand theIONOS privacy policy.
3. Detailed CV requests through Formspree
A detailed CV can be requested through the form in the navigation menu. The form sends your name, email address, optional company and request type to Formspree. Required fields are needed to identify and respond to the request. Please do not submit special categories of personal data through this form.
The legal basis is Article 6(1)(b) GDPR where the request concerns steps prior to entering into a contract. For other professional enquiries, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is the secure and efficient handling of incoming enquiries.
The recipient and processor is Formspree, Inc., United States. Formspree processes the form fields and technical request data to transmit the request and prevent spam. Its service uses infrastructure in the United States. Formspree states that, as a processor, it relies on EU Standard Contractual Clauses for international transfers. Further information is available in theFormspree privacy policyandFormspree security information.
Form submissions are deleted once the request has been fully handled unless contractual or statutory retention obligations require continued storage. If the request results in a business relationship, information required for that relationship may be retained for the applicable statutory periods.
4. Contact by email
When you make contact by email, the information you provide is processed to respond to the enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR. Providers used for the technical operation of email may receive the data. The data is deleted when the matter is resolved unless statutory retention obligations apply.
5. Booking meetings with Cal.com
Cal.com is used for meeting bookings. Your browser connects to Cal.com only when you open “Let’s kick off” in the navigation or visit the dedicated booking page. Cal.com may then process your IP address, browser and device information, referrer, timestamps and usage data. When you make a booking, Cal.com also processes the contact details, appointment information and answers to booking questions that you provide.
The legal basis is Article 6(1)(b) GDPR where the booking concerns steps prior to entering into a contract and otherwise Article 6(1)(f) GDPR. The legitimate interest is the simple and reliable coordination of meetings. Where technically necessary information is stored on or accessed from your device, this is done to provide the booking function you expressly requested under Section 25(2) no. 2 TDDDG. You can alternatively make contact by email.
The recipient and processor for booking data is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, United States. Cal.com processes data in the United States and identifies EU Standard Contractual Clauses or an adequacy mechanism such as the EU-US Data Privacy Framework as its transfer safeguards. Booking data is deleted once it is no longer required for arranging the meeting and subsequent communication unless statutory retention obligations apply. Further information is available in theCal.com privacy policy.
6. Privacy-friendly web analytics with Plausible
This website uses Plausible Analytics to understand aggregated website usage, including page views, referral sources, countries, devices and browsers. The service is provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible acts as a processor for website analytics data.
Plausible does not use cookies, local storage or persistent identifiers and does not track visitors across websites or days. A daily identifier is calculated from the website domain, IP address and user agent using a rotating salt. The raw IP address and user agent are not stored, and the salt is deleted every 24 hours. Analytics data is processed and stored in the European Union.
The purpose is to measure reach and improve the website based on aggregated usage patterns. To the extent that the processing constitutes processing of personal data, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is the privacy-friendly analysis and improvement of this website. Further information is available in Plausible'sdata policyanddata processing agreement.
7. Cookies and automated decisions
Plausible does not set cookies or store information on your device. This website does not use marketing services, advertising pixels or embedded social-media plugins. Cal.com loads only after the booking function is expressly requested and may then store or access technically necessary information on your device. No automated decision-making, including profiling, takes place.
8. External links
The website links to external services including LinkedIn, Medium, Cal.com, Freelancermap, Freelance.de and certification providers. Loading this website does not transmit data to those providers because of these links. Once an external link is followed, the respective provider's privacy terms apply.
9. Recipients and retention
Personal data is made available only to providers required for hosting, analytics, form transmission, email communication or meeting bookings, and to recipients where disclosure is legally required. Data is retained only for as long as the relevant purpose requires. Statutory retention duties and the establishment, exercise or defence of legal claims may require longer retention.
10. Data-subject rights
Subject to the conditions of the GDPR, you have rights including access, rectification, erasure, restriction of processing and data portability. You may withdraw consent with future effect and object, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR.
To exercise these rights, emailhello@peterbenyei.com. You also have the right to lodge a complaint with a data-protection supervisory authority. The authority normally responsible for my place of establishment is theState Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany. Complaints can also be submitted using itsonline complaint form.
11. Data security
The website is transmitted over an encrypted HTTPS connection. Appropriate technical and organisational measures are used to protect personal data against loss, manipulation and unauthorised access. These measures are reviewed and adapted in line with technical developments and the risks of processing.
12. Changes to this notice
This privacy notice will be updated when the website, the services used or legal requirements change. The current version is available on this page. This English translation is provided for convenience; in the event of discrepancies, the German version applies.