Imprint

This is a personal academic website.

Website operator and person responsible for its content

Moritz Schloegel
CISPA Helmholtz Center for Information Security
Stuhlsatzenhaus 5
66123 Saarbrücken
Germany
Email: moritz.schloegel@cispa.de

Privacy Notice

In short: This website does not use analytics, tracking, advertising, forms, or cookies. It is hosted with GitHub Pages. GitHub and its infrastructure providers process connection data, including visitors' IP addresses, when delivering the site.

Last updated: 4 September 2026

1. Controller

The controller responsible for the processing described in this notice is:

Moritz Schloegel
CISPA Helmholtz Center for Information Security
Stuhlsatzenhaus 5
66123 Saarbrücken
Germany
Email: moritz.schloegel@cispa.de

2. Hosting and access data

This website is hosted using GitHub Pages, a service provided by GitHub. When you access the website, your browser necessarily transmits connection data to GitHub and the content-delivery infrastructure used by GitHub. Depending on the request, this data may include your IP address, the date and time of the request, the requested resource, the referring page, browser and operating-system information, the HTTP status code, and the amount of data transferred.

GitHub states that visitors' IP addresses are logged and stored for security purposes. This processing is necessary to deliver the website and to maintain its security and reliability. The legal basis, insofar as the website operator determines this processing, is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable, and efficient publication of this website.

Recipients of this data include GitHub B.V., GitHub, Inc., and infrastructure providers used by GitHub. The live website is currently delivered through Fastly's content-delivery network. GitHub may process data in the United States and other countries outside the European Economic Area. GitHub states that it generally uses the European Commission's Standard Contractual Clauses for relevant international transfers and that GitHub participates in the EU-US Data Privacy Framework.

The website operator does not receive or have access to GitHub Pages visitor logs. GitHub determines how long it retains data under its control; according to its privacy statement, the period depends on the processing purpose and applicable legal obligations. Further information is available in GitHub's GitHub Pages data-collection notice, privacy statement, and subprocessor list.

3. Cookies, analytics, and third-party content

The website's code does not set cookies, use browser storage, perform analytics or tracking, display advertising, or embed content loaded from third parties. No consent banner is therefore used. Fonts, style sheets, images, documents, and videos offered directly on this website are served from the same website.

The website contains ordinary links to external websites. No connection to the linked provider is made merely because such a link is displayed here. If you follow an external link, the provider of the destination website processes the resulting connection data under its own responsibility.

4. Contact by email

If you contact the website operator by email, the information you provide, your email address, and technical message metadata are processed to handle and respond to your request. Depending on the subject of the request, the legal basis is Article 6(1)(f) GDPR (legitimate interest in responding to correspondence) or Article 6(1)(b) GDPR (steps taken at your request before entering into a contract or performance of a contract). Email is processed using CISPA's communications infrastructure.

Correspondence is deleted when the request has been conclusively resolved and there is no continuing need to retain it. Statutory retention obligations or the establishment, exercise, or defence of legal claims may require longer storage.

5. Your rights

Subject to the conditions set out in the GDPR, you may have the right to request access to and rectification or erasure of your personal data, restriction of processing, data portability, and to object to processing. Where processing is based on Article 6(1)(f) GDPR, you have the right to object on grounds relating to your particular situation. To exercise these rights regarding processing by the website operator, use the contact details above.

You also have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for non-public bodies based in Saarland is the Independent Data Protection Centre Saarland.

6. Provision of data and automated decisions

You are not legally or contractually required to provide personal data to use this website. However, transmitting connection data is technically necessary to retrieve it. The website operator does not use automated decision-making or profiling.