Privacy
What this site knows about you
Very little, and nothing that identifies you. No cookies, no advertising, no third-party scripts, fonts or embeds. This page explains the rest.
Who is responsible
Dr. Linus Kohl, Austria (full postal address on request by email). Email: linus@cabbagebaggage.net. This is a private, personal website.
Hosting and server logs
The site consists of static files served from a server that I rent and administer myself (a commercial hosting provider (processor under Art. 28 GDPR); server located in Frankfurt am Main, Germany). As with any web server, each request is briefly recorded in an access log: IP address, time, the address requested, the referring page and the browser identification. The logs serve to keep the site running and to detect abuse. They are not combined with the audience measurement described below and are deleted after 14 days, then deleted automatically. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
Audience measurement without cookies
I want to know which essays are read and which are not. For that I run Umami, an open-source analytics program, on my own server and under this site’s own address. No data goes to an analytics company or any other third party.
What is recorded per page view: the page address (including campaign parameters such as utm_source, if a link contains them), the referring site, browser, operating system, device type, screen size, language, and an approximate location (country, region, city) derived from the IP address. The IP address itself is not stored.
What is recorded about use of a page: clicks on links that leave the site, on email links and on downloads; how far a page was scrolled; which sections of an essay came into view; and roughly how long the page stayed open.
What is not done: no cookies are set and nothing is stored in your browser. There is no advertising identifier and no profile across websites. To count visits, the software computes a hash from the IP address, the browser identification, the site and a secret value that is replaced regularly. The hash cannot be turned back into an IP address and does not allow me to recognise you over longer periods.
If your browser sends a “Do Not Track” signal, nothing is recorded at all. Blocking the script with a content blocker has the same effect and breaks nothing.
Legal basis: legitimate interest in understanding readership with the mildest available means, Art. 6(1)(f) GDPR. Because nothing is stored on or read from your device, no consent under § 165(3) of the Austrian Telecommunications Act 2021 is required.
Fonts and external content
Fonts, styles and images are served from this site. Pages load nothing from other servers. Links to LinkedIn, ORCID, Google Scholar, publishers and other sites are plain links: those sites learn of your visit only if you click, and then their own privacy rules apply.
Email and the essay list
If you write to me, I use your message and address to answer you and keep the correspondence for as long as the matter requires. If you ask to receive essays by email, I keep your address for that purpose alone, send one message per essay and remove you as soon as you say so. Legal basis: your request, Art. 6(1)(b) GDPR, and for the essay list your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection under Articles 15 to 21 GDPR. As the measurement data cannot be linked to a person, I will usually be unable to find “your” entries, which is the intention. You may complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).