Privacy
Privacy Policy
Last updated: November 2026
This Privacy Policy explains how personal data is processed when you visit this website or contact me.
1. Controller
The controller responsible for data processing on this website is:
Thomas Peter Mahr
Waltherstraße 5
80337 Munich
Germany
Phone: +49 177 52 12 693
Email: hello@thomasmahr.eu
2. Website hosting
This website is created and hosted using services provided by:
Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
The Netherlands
When you access this website, technical information necessary to deliver, operate and secure the website may be processed. This may include information such as your IP address, browser and device information, the requested page, and the date and time of access.
The processing is carried out for the purpose of providing a secure, reliable and technically functional website. Where personal data is involved, the legal basis is Article 6(1)(f) GDPR, based on my legitimate interest in the secure and effective operation of this website.
Where Framer or its sub-processors transfer personal data outside the European Economic Area, such transfers are subject to the safeguards required under Chapter V GDPR. Depending on the destination and recipient, these may include an adequacy decision under Article 45 GDPR or Standard Contractual Clauses under Article 46 GDPR.
Further information about applicable safeguards and sub-processors is available in Framer's Data Processing Addendum: https://www.framer.com/legal/data-processing-addendum
3. Framer Analytics
This website uses Framer’s built-in analytics functionality to obtain basic aggregated information about website usage, including page views, visitor numbers, referral sources, device types and countries.
According to Framer, its built-in analytics does not use cookies or persistent identifiers to track individual visitors. Technical information such as IP address and user-agent information may be processed and hashed using a regularly rotating value in order to calculate aggregated visitor statistics.
The analytics information is used to understand the general use and performance of this website. The legal basis is Article 6(1)(f) GDPR, based on my legitimate interest in understanding and improving the website.
No separate advertising or third-party analytics service such as Google Analytics is currently used on this website.
4. Contact and email communication
If you contact me by email or telephone, I process the information you provide in order to respond to your enquiry and, where applicable, to prepare or perform a business relationship.
Email communication is hosted by:
Infomaniak Network SA
Rue Eugène Marziano 25
1227 Les Acacias (GE)
Switzerland
Depending on the context, personal data provided through email or telephone communications is processed under Article 6(1)(b) GDPR where necessary for a contract or pre-contractual measures involving the data subject, or under Article 6(1)(f) GDPR where necessary for handling other professional or business enquiries.
Infomaniak's email services are hosted in Switzerland. The European Commission has recognised Switzerland as providing an adequate level of data protection under Article 45 GDPR.
Providing personal data when contacting me is voluntary. However, without the information necessary to process your enquiry and respond to you, I may be unable to handle your request.
Information about retention periods is provided in Section 7 below.
5. LinkedIn
This website contains a link to my profile on LinkedIn.
The link is a regular external link. No LinkedIn content or tracking functionality is embedded on this website. Data is therefore transmitted to LinkedIn only when you actively follow the link.
Once you visit LinkedIn, the processing of personal data is governed by LinkedIn’s own privacy terms.
For users in the European Union and European Economic Area, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for LinkedIn’s processing of personal data.
6. Cookies and similar technologies
This website currently does not use non-essential cookies or third-party tracking technologies requiring consent.
Framer’s built-in analytics operates without cookies or persistent tracking identifiers.
If additional services requiring consent are introduced in the future, this Privacy Policy and, where necessary, the website’s consent mechanism will be updated accordingly.
7. Data retention
Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations apply.
General enquiries
Email enquiries and related correspondence that do not result in a business relationship and are not subject to statutory retention requirements are deleted 12 months after the last substantive communication.
Mandate-related records
Where correspondence or other records relate to a mandate or business relationship, relevant information is retained in accordance with applicable statutory commercial and tax retention requirements.
The applicable retention periods depend on the type of document and the relevant legal requirements. Data may also be retained for longer where necessary for the establishment, exercise or defence of legal claims.
Technical website data
Technical access and security data processed by the website hosting provider are retained in accordance with the applicable processing purposes and the provider's retention and deletion arrangements.
8. Your rights
Subject to the conditions provided by applicable data protection law, you have the right to:
request access to your personal data,
request correction of inaccurate data,
request deletion of your personal data,
request restriction of processing,
object to processing based on legitimate interests,
receive your data in a portable format where applicable, and
withdraw consent at any time where processing is based on consent
Right to object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.
I will cease processing the relevant personal data unless I can demonstrate compelling legitimate grounds which override your interests, rights or freedoms, or unless the processing is necessary for the establishment, exercise or defense of legal claims.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, you can contact me at hello@thomasmahr.eu.
9. Changes to this Privacy Policy
This Privacy Policy may be updated if the website, the services used or the applicable legal requirements change.