Privacy policy

1. Controller

Prof. Dr. Markus Pfeil
Dr.-Zimmermann-Str. 50
88709 Meersburg, Germany
Email: m.o.pfeil@gmail.com
Phone: +49 1512 7575725

No data protection officer has been appointed, as the statutory requirements for doing so are not met.

2. Overview

• This is a static website. No cookies are set, no analytics or advertising services are embedded, and no fonts or scripts are loaded from third-party servers.
• When pages are accessed, the hosting provider processes technically necessary connection data (server log files).
• The web apps (Ideomotor Pendulum, The Masks of Tarot) process sensor and input data exclusively on the device, in the browser. No data is transmitted to a server.
• Contact is by email or telephone only; there is no contact form.

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When a page is accessed, the browser automatically transmits data to the hosting provider’s server, which is stored in server log files. This includes in particular:

• the IP address of the requesting device,
• date and time of the request,
• the page or file accessed and the volume of data transferred,
• browser type and version, operating system,
• the previously visited page (referrer URL).

The legal basis is Article 6 (1) (f) GDPR. The legitimate interest lies in the technically error-free provision and the security of the website. The data is not combined with other data sources and is deleted after a short time unless it is needed to investigate security incidents. A data processing agreement under Article 28 GDPR is in place with the hosting provider. Where Hostinger uses data centres outside the EU, transfers take place on the basis of the EU standard contractual clauses.

4. Provision of the source code via GitHub

The files of this website are managed in a repository at GitHub, Inc. and transferred from there to the hosting provider’s server. Visitors to the website have no contact with GitHub; no content from GitHub servers is embedded in the pages.

5. Contact by email or telephone

If you send me enquiries by email or telephone, your details, including the contact data you provide, are stored for the purpose of handling the enquiry and in case of follow-up questions. The legal basis is Article 6 (1) (b) GDPR where the enquiry is aimed at a contract, and otherwise Article 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations stand in the way. Please note that unencrypted emails can be read by third parties in transit.

6. Web apps: Ideomotor Pendulum and The Masks of Tarot

The applications provided under “Tools” run entirely in the browser on your device.

• Ideomotor Pendulum: With your consent, the app reads data from the device’s motion and orientation sensors in order to compute the pendulum movement. This data and the measurement series derived from it are processed exclusively on the device and, if you wish, stored in your browser’s local storage. Nothing is transmitted to me or to third parties. A service worker stores the app files in the browser cache so that the app can be used offline. Export as a CSV file takes place only at your request and only to your device.
• The Masks of Tarot: Your card choice and language setting are held only in the page’s working memory and discarded when the page is closed. Nothing is transmitted.

Local storage in the browser (cache, local storage) is necessary for the apps to function (Section 25 (2) no. 2 of the German TDDDG). You can delete the stored data at any time via your browser settings.

7. External links

This website links to external sites, including the European Commission’s online dispute resolution platform. When you click an external link, the privacy policy of the respective provider applies.

8. Shop (in preparation)

The “Shop” section is currently a placeholder without any ordering or payment function. No personal data is collected there. As soon as a payment or course service is connected, this privacy policy will be extended in advance with the information then required (service provider, purpose, legal basis, retention period).

9. Your rights

With regard to the personal data concerning you, you have the following rights against me:

• right of access (Article 15 GDPR),
• right to rectification (Article 16 GDPR),
• right to erasure (Article 17 GDPR),
• right to restriction of processing (Article 18 GDPR),
• right to data portability (Article 20 GDPR),
• right to object to processing (Article 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is that of your habitual residence or of the controller’s seat; for Baden-Württemberg this is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

10. Right to object

Where processing is based on Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

11. SSL encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line begins with “https://”.

12. Changes

I reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to the website. The new privacy policy will then apply to your next visit.

Last updated: September 2026.