Privacy policy
Last updated: October 2026
This English version is provided for convenience. In case of discrepancies, the German version prevails.
1. Controller
The controller responsible for data processing on this website is:
Tobias Leingruber
Leingruber Consulting
c/o IP-Management #11976
Ludwig-Erhard-Straße 18
20459 Hamburg, Germany
Email: tobias@leingruber.com
Phone: +49 89 9952990
2. General information
This privacy policy explains which personal data is processed when you visit this website, for what purpose and on what legal basis. Personal data is any data that can be used to identify you personally.
This website is delivered as a static website. There is no login and there are no user accounts. Fonts are served locally from my own server. No external content such as videos or maps is embedded.
3. Hosting
This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the website, the hosting provider automatically records information in so-called server log files that your browser transmits. This includes:
- IP address of the requesting device
- date and time of the request
- page or file accessed
- amount of data transferred and status code
- browser type and version, operating system
- referrer URL (the page visited before)
This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR. The legitimate interest lies in the technically error-free presentation, the security and the optimization of the website. The log files are deleted by the hosting provider according to its own rules, usually after a few weeks at the latest.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.
4. Contact form, email and phone
If you use the contact form, the data you enter (name, email address, optional phone number, content of the message) is transmitted to me by email. The transmission is encrypted (TLS). The data is not stored on the web server and is not passed on to third parties; only the fact that an inquiry was sent, with its time, is counted for the statistics (see section 5). The form contains a field invisible to humans to ward off spam bots; no additional data is collected by it.
The same applies if you contact me directly by email or phone. The legal basis is Art. 6(1)(b) GDPR where the inquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). The data is deleted as soon as the inquiry has been dealt with and no statutory retention obligations stand in the way.
5. Audience measurement without cookies
To see how many people visit the website and which pages are read, a small, self-developed statistics tool runs on the web server. No cookies are set, nothing is stored in your browser and no third parties are involved. The data never leaves the server at Strato.
For each page view the following is stored: the page accessed, the time, the origin of the visit (only the domain of the referring page), the language of the page and whether a mobile device or a desktop browser was used. In addition, clicks on the email address or the LinkedIn profile and submissions of the contact form are counted.
To tell visitors apart within a single day, a shortened hash is calculated from the IP address, the browser identifier and a random value that changes daily. The IP address itself is not stored. The random value is discarded at midnight, after which the hash can no longer be attributed to any person. Recognizing a visitor across several days is not possible.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in understanding whether and how the website is used. Since no information is stored on or read from your device, no consent under Section 25 TDDDG is required.
6. Your rights
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise these rights, an email to tobias@leingruber.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). One competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.
7. SSL encryption
For security reasons, this website uses SSL or TLS encryption. You can recognize this by the “https://” in the address bar and the lock symbol in your browser.
8. Changes
I reserve the right to amend this privacy policy if the legal situation or the services used change. The version published on this page at the time applies.