Controller within the meaning of the GDPR:
Iordanis Felekidis
Egerer Straße 21
91207 Lauf
Germany
Email: felekidis@ifcon.cloud
This website is a purely informational site. It does not use cookies or any analytics or tracking tools (e.g. Google Analytics), and it does not store any information on your device, for example in local storage – not even for the language selection, as the language switcher is an ordinary link. There is no newsletter sign-up and no embedded third-party content (e.g. videos, maps or social media plugins).
Personal data is processed in only three situations: technically when you visit the website (sections 2 and 3), when you send me an email (sections 3 and 4) and when you use the contact form (section 5). The only recipients are the service providers named below, who act on my behalf (including the spam filter used by Netlify, section 5). Beyond that, I only disclose data where I am legally required to do so.
The website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify delivers the pages via a globally distributed server network (content delivery network). When you visit the website, technically necessary data is processed, in particular your IP address, the date and time of access, the page requested, the amount of data transferred, and your browser type and operating system (server log files). Without this data the website cannot be delivered. It is also used for stability and security, e.g. to defend against attacks.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in delivering the website securely, stably and reliably. Netlify processes the data on my behalf under its Data Processing Agreement, which forms part of Netlify’s terms of service (Art. 28 GDPR). How long Netlify retains the log files is determined by Netlify; I do not use them for analytics or marketing purposes and do not combine them with other data.
As Netlify is based in the USA, data may be transferred to the USA. Netlify is certified under the EU-U.S. Data Privacy Framework (DPF); these transfers are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the Data Processing Agreement provides for the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Further information is available in Netlify’s privacy policy: https://www.netlify.com/privacy/
The domain ifcon.cloud is registered with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, where its DNS records are also managed. The website itself is not hosted by IONOS but by Netlify (section 2). When you visit the website, your device or your internet provider queries the IONOS DNS servers to look up the website’s address.
I also use IONOS as my email provider: emails to addresses at ifcon.cloud are received, stored and sent via IONOS servers. When you write to me, IONOS processes your email address, the content of your message and technical metadata (e.g. time and mail servers involved).
IONOS acts as my processor (Art. 28 GDPR) under a data processing agreement with IONOS. The legal basis for operating the domain and DNS is Art. 6(1)(f) GDPR (legitimate interest in the website being reachable). For emails, the legal bases set out in section 4 apply. Further information: IONOS privacy policy (German)
If you contact me by email, I use the data you provide (e.g. name, email address, message content) solely to process your enquiry. I do not share it with third parties; IONOS processes it only on my behalf as my email provider (section 3).
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or to pre-contractual steps (e.g. a quote). In all other cases, the legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in responding to enquiries addressed to me.
I store your data for as long as necessary to process your enquiry. I then delete it unless statutory retention obligations (in particular under German commercial and tax law) apply. In that case I keep the relevant messages until the respective retention period expires (Art. 6(1)(c) GDPR).
On the home page you can write to me using a contact form. This involves processing the details you enter – name, email address and your message (all mandatory, as otherwise I can neither understand your enquiry nor reply to you) – and, technically, the time of submission, your IP address, the page from which you submit the form and information about your browser (user agent). I use this data solely to handle your enquiry.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps (e.g. a quote). In all other cases the legal basis is Art. 6(1)(f) GDPR; my legitimate interest is in responding to enquiries addressed to me.
The form is handled by the “Netlify Forms” service of my hosting provider Netlify, Inc. (section 2). Netlify receives and stores submissions in my Netlify account and notifies me of new submissions by email; this notification contains the content of your message and is delivered to my mailbox at IONOS (section 3). Netlify acts as my processor (Art. 28 GDPR, Data Processing Agreement as described in section 2). For transfers to the USA, the information in section 2 applies (EU-U.S. Data Privacy Framework, supplemented by the EU Standard Contractual Clauses).
To protect against spam, Netlify automatically checks every submission using the Akismet service of Automattic Inc., USA, which Netlify uses as a sub-processor. For this purpose, the form content and technical data such as IP address and user agent are transmitted to Akismet; according to Automattic, transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). In addition, the form contains a field that is invisible to humans (“honeypot”) to detect automated submissions. The legal basis for spam protection is Art. 6(1)(f) GDPR; my legitimate interest is in protecting the form against abuse and mass spam submissions. No cookies are set and no reCAPTCHA or similar service is embedded.
Submissions remain stored in Netlify until I delete them. I delete them there once the enquiry has been dealt with; submissions identified as spam are deleted as well. If we continue the correspondence by email, section 4 applies to those messages (including statutory retention obligations).
The Inter typeface, the icons (Font Awesome) and the layout files (Tailwind CSS) are served locally from this web server. No connection to third-party servers (e.g. Google Fonts or content delivery networks) is established, and no data is transferred to their providers. They are delivered as part of the hosting described in section 2.
The website is delivered exclusively over an encrypted HTTPS connection (TLS). Requests via unencrypted HTTP are automatically redirected to HTTPS. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar.
The website contains plain links to other websites, e.g. to my company page on LinkedIn. These are not embedded content: no data is transferred to these providers when you visit this website. Only when you click a link is the other website opened; its provider will usually learn which website you came from. The respective provider is responsible for any processing on its website, and its privacy policy applies.
You are under no statutory or contractual obligation to provide me with personal data. However, the website cannot be displayed without the technically necessary connection data (section 2), and I cannot reply to you without an email address – neither by email nor to a message sent via the contact form. No automated decision-making, including profiling (Art. 22 GDPR), takes place.
You have the right to access the data I hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18), and to data portability (Art. 20 GDPR). Simply contact me by email.
Right to object under Art. 21 GDPR
Where I process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal objection by email to felekidis@ifcon.cloud is sufficient.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The authority competent for me is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA – Bavarian Data Protection Authority)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
If you have any questions about data protection, you can contact me at any time at the address above.
Last updated: October 2026