Privacy Policy
Last updated: 11 January 2026
1. Controller
Ingo Josefsson
c/o IP-Management #8371
Ludwig-Erhard-Strasse 18
20459 Hamburg
Germany
Contact details
Email: mail→ingojosefsson.com
2. Scope
This Privacy Policy explains how we process personal data when you visit ingojosefsson.com (the “Website”), contact us, or interact with embedded third party content.
Depending on your location and the context, processing may be subject to the EU/EEA GDPR and or the Swiss Federal Act on Data Protection (FADP).
3. Hosting and server log data (webgo)
Our Website is hosted by webgo GmbH (Germany).
When you access the Website, technical data is processed automatically to deliver the content and maintain security and stability, in particular: IP address, date and time of access, requested pages/files, referrer URL, browser type/version, operating system, and similar log data.
Purpose: delivery of the Website, IT security, troubleshooting, abuse prevention.
Legal basis (GDPR): legitimate interests.
Retention: for as long as necessary for the purposes above (typically a limited period), and longer only if required for security investigations or legal obligations.
4. Contacting us (email and contact form)
If you contact us by email or via the contact form, we process the data you provide (e.g. name, email address, message content, and any additional fields you submit).
Purpose: handling your request and communicating with you.
Legal basis (GDPR): performance of contract or pre contractual steps where applicable, otherwise legitimate interests.
Retention: we keep correspondence as long as needed to handle your request and for reasonable documentation, then delete or anonymise it unless legal retention obligations apply.
5. Analytics (Google Analytics 4)
We use Google Analytics 4 (GA4) to understand how the Website is used and to improve content and performance. GA4 typically uses cookies and similar technologies to recognise browsers and collect usage information (e.g. pages viewed, interactions, approximate location derived from IP, device and browser information).
Common GA4 cookies include _ga and ga* (property related). GA4 retention in the GA4 settings is configurable (commonly 2 months or 14 months).
Recipient: Google (in Europe typically Google Ireland Ltd., with possible processing by Google LLC in the USA).
Legal basis (GDPR): consent. GA4 should only load after you consent via the cookie banner or settings.
International transfers: GA4 can involve processing outside the EU/EEA/Switzerland (e.g. USA). We use appropriate safeguards where required.
How to withdraw consent: use the cookie settings on the Website (if available) or delete cookies in your browser and adjust your consent choices again on your next visit.
6. Cookies and consent management
The Website may use cookies that are strictly necessary for basic functions, and optional cookies (notably analytics) that require your consent.
7. Embedded third party content (optional)
If we embed content from third parties, your browser can connect directly to the third party’s servers. This may transmit your IP address and other technical data, and the provider may set cookies or use similar identifiers.
The Website may include (now or later):
-
YouTube (videos)
-
Spotify (player)
-
Apple Music (player)
-
Bandcamp (player)
-
SoundCloud (player)
-
Instagram (posts/feeds)
Legal basis (GDPR): consent where embedding triggers tracking/cookies, otherwise legitimate interests for providing requested media functionality.
If you want the cleanest setup: load embeds only after consent (or use a “click to load” solution).
8. Your rights
If GDPR applies, you may have the right to access, rectification, erasure, restriction, data portability, and to object, plus the right to withdraw consent at any time (without affecting processing before withdrawal).
If Swiss FADP applies, you have comparable rights, in particular the right to information about your personal data processing.
To exercise your rights, contact us using the details in Section 1.
9. Complaints
EU/EEA: you can lodge a complaint with a supervisory authority in your place of residence, work, or where an alleged infringement occurred.
Switzerland: you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).
10. Security
We use reasonable technical and organisational measures to protect the Website and data (e.g. transport encryption via HTTPS where available), but no system is 100% secure.
11. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in the Website, services, or legal requirements. The current version is published on this page.