1. Data Controller

Markus Ostertag
Munich, Germany
E-Mail: mo@mo-its.de

2. Overview

This website is a personal blog and portfolio. It does not sell products, offer user accounts, or process payment data. The following sections explain what data is collected, why, and on what legal basis.

3. Hosting

This website is hosted on Amazon Web Services (AWS) using Amazon CloudFront and Amazon S3. When you visit, your browser automatically transmits certain technical data to the hosting infrastructure, including your IP address, browser type and version, operating system, referring URL, and the date and time of your request. This data is processed to deliver the website content to you.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in providing a functional and secure website.
Data transfer: AWS infrastructure may process data outside the EU (United States). AWS operates under the EU-US Data Privacy Framework and has committed to the EU Standard Contractual Clauses (SCCs) as an additional safeguard for international data transfers, as documented in the AWS GDPR Data Processing Addendum.

4. CloudWatch Real User Monitoring (RUM)

This website uses Amazon CloudWatch RUM to collect anonymized performance and error telemetry. This helps identify technical issues and improve the user experience.

What is collected:

  • Page load performance metrics (timing data)
  • JavaScript errors
  • HTTP request performance data
  • Browser type, viewport size, and operating system (no unique device fingerprinting)

What is NOT collected:

  • No cookies are set by RUM (allowCookies is set to false)
  • No persistent user IDs or session IDs across page loads
  • No personally identifiable information (names, email addresses, etc.)

The collected telemetry is sent to AWS CloudWatch for processing and analysis.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in monitoring website performance and fixing technical errors. The data collected is minimal, anonymized, and does not track individual users across sessions.
Data transfer: Data is transferred to AWS under the EU-US Data Privacy Framework, supplemented by the EU Standard Contractual Clauses (SCCs) incorporated in the AWS GDPR Data Processing Addendum.

5. Local Storage (Theme Preference)

This website stores your preferred color theme (light or dark mode) in your browser’s localStorage. This is a purely technical preference that stays on your device and is never transmitted to any server.

Legal basis: § 25(2) Nr. 2 TDDDG — strictly necessary for the service requested by the user (displaying the website in the user’s chosen appearance).

This website contains links to external websites (e.g., LinkedIn, GitHub). When you follow these links, you leave this website. The operators of those sites have their own privacy policies; I have no influence over their data processing.

7. No Additional Tracking

This website does not use:

  • Google Analytics or similar third-party analytics tools
  • Social media plugins or embedded social media content that tracks visitors
  • Advertising networks or remarketing tools
  • Newsletter sign-up forms or contact forms that collect personal data

8. Your Rights Under GDPR

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise any of these rights, contact me at mo@mo-its.de.

You also have the right to lodge a complaint with a supervisory authority. The authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

9. Changes to This Privacy Policy

This privacy policy may be updated to reflect changes in data processing or legal requirements. The current version is always available at this URL.

Last updated: August 2026