This policy covers this website. For the apps HABITAT and JENDRALLEK, see the privacy policy for the apps.
Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Leon Jendrallek
Weidestraße 2
19243 Wittenburg
Germany
jendrallek@ljmfs.de
What this website does not do
For the sake of completeness, first what does not happen here:
- No cookies are set unless you explicitly allow the Buy Me a Coffee support button to load. Without that consent, the website does not set a single cookie.
- There is no analytics and no tracking — no Google Analytics, no Matomo, no pixels, no recognition across visits.
- There are no forms, no sign-up and no newsletter. No names or email addresses are collected through the website.
- There are no social media plugins.
- Without your consent, nothing is loaded from third-party servers — no fonts, no maps, no videos. All images and videos are stored on my own server, and the typeface used is the system font already present on your device.
Opening the website and server log files
When you open this website, your browser transmits technically necessary data to the server. This data is processed in what are known as log files:
- your IP address
- the date and time of access
- the page or file requested
- browser type and version, and the operating system used
- the previously visited page, if your browser transmits it
This data is necessary for the page to be delivered to your device at all, and serves technical security, in particular the prevention of attacks. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in the secure and trouble-free operation of the website. This data is not merged with other data sources, and no personal identification is carried out.
Hosting
This website is hosted by:
Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA
Cloudflare processes the access data named above on my behalf, in order to deliver the website and protect it against attacks. A data processing agreement pursuant to Art. 28 GDPR is in place. This may involve a transfer of data to the USA; Cloudflare bases such transfers on the EU Commission's standard contractual clauses and is certified under the EU-US Data Privacy Framework. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
Encryption
This website is delivered exclusively over encrypted HTTPS. The connection between your browser and the server therefore cannot be read by third parties. You can recognise this by the padlock symbol in the address bar.
Storage period
Log data is stored only for as long as necessary for the purposes named above, and is then deleted. Beyond that, no personal data is stored on this website.
Buy Me a Coffee
This website can display a support button from the service Buy Me a Coffee. The provider is Buy Me a Coffee, Inc., 1201 Orange Street, Wilmington, DE 19801, USA.
The button is only loaded if you have explicitly consented beforehand. When it loads, your IP address is transmitted to Buy Me a Coffee; a cookie is also set in your browser so the notice does not appear on every visit. Without consent, nothing is loaded and nothing is transmitted.
The legal basis is your consent under Article 6(1)(a) GDPR. The transfer goes to the USA, a country without an adequacy decision; a level of protection equivalent to European law cannot be guaranteed there.
You can withdraw your consent at any time with effect for the future. The withdrawal takes effect immediately, and nothing will be loaded on your next visit.
Links to other services
This website links to the JENDRALLEK app (jendrallek.expo.app) and to external sites such as pexels.com. Their own privacy policies apply to data processing on those sites; I have no influence over them. Data is transmitted to the respective provider only once you click such a link.
The JENDRALLEK app has its own privacy policy. The principle there is that health data such as cycle, sleep times and journal stay exclusively on your device and are never transferred to a server.
Your rights
You have the right at any time:
- to request information about the data stored about you (Art. 15 GDPR)
- to request the correction of inaccurate data (Art. 16 GDPR)
- to request the erasure of your data (Art. 17 GDPR)
- to request restriction of processing (Art. 18 GDPR)
- to object to processing (Art. 21 GDPR)
- to receive your data in a portable format (Art. 20 GDPR)
An informal email to jendrallek@ljmfs.de is enough for all of these.
Right to complain
If you believe that the processing of your data violates the GDPR, you can lodge a complaint with a supervisory authority. The authority responsible for me is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit
Mecklenburg-Vorpommern
Werderstraße 74a
19055 Schwerin
Germany
Changes to this policy
This website is growing, and this policy may change with it. The version published here is always the one that applies. The date below shows when it was last changed.
Last updated: September 11, 2026