Privacy policy

This website is deliberately data-minimal: no cookies, no tracking, no analytics tools, no external fonts. Details according to the General Data Protection Regulation (GDPR) follow below.

1. Controller

Responsible for data processing on this website:

2. Hosting and server log files

This website is hosted by an external provider: Hostinger International Ltd., Jonavos g. 60C, 44192 Kaunas, Lithuania. When you access the site, the server automatically collects technical access data transmitted by your browser (server log files): IP address, date and time of access, file requested, volume of data transferred, referrer URL as well as browser and operating system details.

This data is used solely for the secure and stable operation of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a functioning, secure website). A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

3. Fonts

The fonts used (Bricolage Grotesque, Archivo, IBM Plex Mono) are served locally from this website’s own server. No data is transmitted to Google Fonts or any other third party, and your IP address is not passed on to external font providers.

4. Local storage in your browser

The site keeps three entries in your browser’s local storage: your language choice, so the automatic redirect does not send you somewhere against your will, your choice between the light and dark appearance, and a counter that decides which headline appears on the home page and whether the contact section greets you as a returning visitor. All three are purely functional settings. No personal data is stored, nothing is transmitted to a server and no cookies are set. You can delete this storage at any time via your browser settings.

5. No cookies, no tracking

This website sets no cookies and uses no analytics, tracking or advertising tools (no Google Analytics, no Meta pixel or similar). Links to Instagram, LinkedIn or other websites are plain text links; no social media plugins that transmit data on page load are embedded. A cookie banner is therefore not required.

6. Contacting me

If you contact me by email or phone, I process the data you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR (legitimate interest in responding). The data is deleted once it is no longer required and no statutory retention obligations apply.

7. Contact form

This website provides a contact form. Only the details you enter are processed: name, email address, the selected topic and your message. These details are sent to me by email when you submit the form.

No data is stored in a database, no external form service is used and there is no transfer to third parties. Processing takes place on the server of the hosting provider named in section 2.

To protect against automated messages, the form contains a hidden field (“honeypot”) that remains invisible to you. No personal data is evaluated for this and no external anti-spam service is embedded.

The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give via the checkbox when submitting, as well as Art. 6 (1) (b) GDPR for pre-contractual measures. You may withdraw your consent at any time by informal email. The data is deleted once your enquiry has been dealt with conclusively and no statutory retention periods apply.

8. External links

When you click external links (for example to bubori.com, exfair.de or social media profiles) you leave this website. The operators of those sites are responsible for data processing there.

9. Your rights

Under the GDPR you have the following rights:

• Access to the data stored about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)

An informal email to hello@manuelbubori.com is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is usually the State Commissioner for Data Protection of Baden-Württemberg, Germany.

10. Status

Status of this privacy policy: 2026. This text will be updated if the website changes.