Privacy Policy

Jul 31, 2026 · 4 min read

Last updated: 31 July 2026

1. Controller

The controller responsible for processing personal data on this website is:

Prof. Dr. Marco Kalz
Heidelberg University of Education
Keplerstraße 87
69120 Heidelberg
Germany

Email: kalz@ph-heidelberg.de

2. Hosting through GitHub Pages

This website is hosted using GitHub Pages, a service provided by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.

When this website is accessed, GitHub may process technical information such as the IP address, browser and device information, the requested page, referring page, and the date and time of access. GitHub states that IP addresses of visitors to GitHub Pages are logged and stored for security purposes.

The processing is based on Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable, and efficient provision of this website.

Further information is available in the GitHub Privacy Statement.

3. Newsletter through SendFox

Visitors may subscribe to the newsletter The day’s refrain – musings on digital education. The newsletter service is provided by Sumo Group Inc., doing business as SendFox, 1305 E. 6th St #3, Austin, TX 78702, USA.

When you subscribe, the information entered in the subscription form, including your first name, last name, email address, consent status, and potentially technical information such as your IP address and submission time, is transmitted to SendFox.

The processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by using the unsubscribe link contained in each newsletter or by contacting the controller. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The data is retained until you unsubscribe or request deletion, unless legal retention obligations apply. Data may be processed in the United States.

Further information is available in the SendFox Privacy Policy.

4. Contact form through FormRobin

This website embeds a contact form provided by FormRobin, a service operated by Sumo Group, Inc.

When the contact section is opened, a connection to FormRobin is established because the form is embedded from FormRobin’s servers. Technical information such as your IP address, browser information, and the time of access may therefore be transmitted to FormRobin.

When you submit the form, FormRobin processes the information you enter, such as your name, email address, subject, and message, and forwards it to the controller.

The processing is based on Article 6(1)(b) GDPR where your enquiry concerns pre-contractual or contractual matters. For other enquiries, processing is based on Article 6(1)(f) GDPR. The legitimate interest is responding to enquiries and facilitating professional communication.

Contact-form data is retained only for as long as necessary to respond to the enquiry and meet any applicable legal obligations. Data may be processed in the United States.

Further information is available in the FormRobin Privacy Policy.

5. Anonymous feedback through Admonymous

This website contains a link to an external anonymous-feedback service provided through Admonymous. Admonymous is maintained by Eloïse Rosen.

No information is transmitted to Admonymous merely because the link is displayed. When you click the link, you leave this website and establish a direct connection to Admonymous. Admonymous may then process technical information and any feedback or optional name you submit according to its own terms and practices.

Feedback can be submitted anonymously. However, users should avoid including personal or confidential information about themselves or third parties.

Further information is available in the Admonymous FAQ.

6. External links

This website contains links to external websites and services. The respective operators are responsible for data processing after you follow such a link. This Privacy Policy does not govern the privacy practices of external websites.

7. Cookies and analytics

This website does not use its own analytics or advertising system. Embedded third-party services may use technically necessary storage mechanisms or process technical connection data according to their respective privacy policies.

8. Retention of personal data

Personal data is retained only for as long as necessary for the respective purpose or as required by statutory retention obligations. Data is deleted when the purpose no longer applies and no legal obligation requires continued retention.

9. Your rights

Subject to the requirements of the GDPR, you have the right to:

  • request access to your personal data under Article 15 GDPR;
  • request rectification under Article 16 GDPR;
  • request erasure under Article 17 GDPR;
  • request restriction of processing under Article 18 GDPR;
  • receive data in a portable format under Article 20 GDPR;
  • object to processing based on Article 6(1)(f) GDPR under Article 21 GDPR;
  • withdraw consent at any time under Article 7(3) GDPR; and
  • lodge a complaint with a data protection supervisory authority under Article 77 GDPR.

The competent supervisory authority in Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: baden-wuerttemberg.datenschutz.de.

To exercise your rights, contact kalz@ph-heidelberg.de.

10. Changes to this Privacy Policy

This Privacy Policy may be updated when the website, embedded services, or legal requirements change. The current version is published on this page.