← Back to home   ·   DE | EN

Privacy

This privacy notice describes the processing of personal data when you visit denispijetlovic.de and use the features provided on this website.

1. Controller

Dr. Denis Pijetlovic-Gerrietzen
c/o University of Bremen
Enrique-Schmidt-Str. 1
28359 Bremen
Germany

Email: denis.pijetlovic@uni-bremen.de
Telephone: +49 421 218-66782

2. Hosting and technical operation

This website is hosted by WordPress.com. The provider for customers in Europe is Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, D02 AY86, Ireland. Services and servers within the Automattic group are also used to deliver the website, images, stylesheets and scripts.

When you access the website, the hosting provider processes information including your IP address, the requested URL, the date and time, browser and operating system details and, where applicable, the referring page. This supports website delivery, troubleshooting and security. For technical performance monitoring, the platform also loads the “Bilmur” script from s0.wp.com, transmitting connection data and page-loading measurements to Automattic. The legal basis for technical operation and security processing is Article 6(1)(f) GDPR: the legitimate interest in providing a reliable and secure website.

Automattic states that it generally retains web server logs for approximately 30 days. Longer retention may be necessary to investigate security incidents or meet legal obligations. Further information: Automattic’s privacy notice for visitors to its users’ websites.

3. Recipients and international processing

In addition to the controller, the hosting provider, affiliated companies and technical service providers may receive data. Communication through the university email account uses the University of Bremen’s IT infrastructure. Automattic also processes data outside the EU and EEA, particularly in the United States.

Transfers to third countries are subject to the requirements of Articles 44 et seq. GDPR, in particular an applicable adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses. Automattic provides information on recipients and transfer mechanisms in its privacy information and data processing agreement information. Further details and, where applicable, a copy of relevant safeguards may be requested using the contact details above.

4. Contact by email, telephone or form

If you contact me, I process the contact information you provide and the content of your enquiry to respond to it. The German “Angebot” page contains a Jetpack contact form. It processes your name, email address and message, together with technical information such as your IP address and the time of submission. The message is stored in the website database and forwarded by email to the person responsible for the form.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps; otherwise, it is Article 6(1)(f) GDPR for handling incoming enquiries. The information is necessary for the relevant contact and response; no automated decision is made. Enquiries are deleted once they have been dealt with, unless retention obligations or legitimate grounds for continued storage, such as establishing or defending legal claims, apply.

5. Spam protection

Akismet, an Automattic service, is used for contact form submissions and, where applicable, comments. Submitted content, contact information, IP addresses and browser information may be sent to the service for spam checking. The purpose is to protect against unsolicited or abusive messages; the legal basis is Article 6(1)(f) GDPR. The Automattic privacy notice linked above provides information on the scope and retention criteria. Form details: Jetpack Form Block.

6. Email subscriptions

The German “Wissen” page lets you subscribe to new posts using WordPress.com’s Jetpack subscription feature. Automattic processes your email address, selected subscription and technical registration information, such as your IP address and the time of the request, for delivery and abuse prevention. New subscriptions are subject to confirmation by email.

Delivery is based on your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future using the unsubscribe link in the messages or subscription management. Data required for delivery is used for the duration of the subscription; evidence of consent may be retained longer where necessary to meet legal obligations or establish or defend legal claims. Further information: Jetpack Newsletter.

7. Comments and profile images

If you use an available comment or image-comment feature, your comment and the contact details you provide are processed; IP addresses and browser identifiers may also be processed for spam prevention. Published comments remain associated with the relevant content until removed or a justified deletion request is implemented. The legal basis is Article 6(1)(f) GDPR for enabling and securing this exchange.

When Gravatar profile images or profile cards are displayed, an identifier derived from the email address may be transmitted to Automattic; loading also provides the service with technical connection data. Please also see Automattic’s information for website visitors.

8. Cookies and visitor statistics

Jetpack Stats is disabled. This website therefore does not use Jetpack visitor analytics to evaluate page views and clicked links. The hosting provider’s technical processing described in Section 2 is separate from this.

WordPress and Jetpack may use technically necessary cookies or comparable storage, for example when you sign in or expressly choose a subscription feature. Jetpack specifies a duration of 347 days for remembering active subscription preferences. Where storage or access is strictly necessary to provide a service you have expressly requested, Section 25(2), point 2, TDDDG applies; subsequent processing is based on the relevant GDPR provision described above. Further information: Jetpack cookies.

9. AI text lab

The typing effect and automatic text changes run in your browser. Automatic rotation uses prepared formulations or formulations generated on the server through the OpenAI API. For generation, OpenAI receives my public professional profile, the writing instructions and, where applicable, previous short texts. Automatically generated batches are cached on the web server.

Using “Prompt”, you may voluntarily enter your own writing idea. Only when you select “Generate” or submit with the Enter key are this idea, the currently displayed short text and my public professional profile sent to this website’s server and then to OpenAI to create a new self-description. This is available in German and English. The interactive result is shown only in the respective browser tab and does not change permanent website content. Please do not enter personal, confidential or sensitive information.

The text lab does not store your writing ideas or interactive results in the WordPress database, set cookies for them or save them in persistent browser storage. They remain in the tab’s memory during the open session. To limit abusive requests, the web server derives an identifier from the connection IP address using a secret key. It is cached together with request counts and timestamps and expires one hour after the last request. The text lab does not send this identifier or the visitor IP address to OpenAI. The hosting-related processing described in Section 2 remains separate.

The server-side OpenAI request uses store:false. This does not mean that OpenAI maintains no security logs. This integration is not configured for processing exclusively within the EU. Information about API processing and retention: OpenAI data controls. If generation is unavailable or request limits are reached, the available texts remain visible.

10. External links

LinkedIn, publishers, project websites and other external services are accessible through ordinary links. Merely displaying these links does not establish a connection to their destination websites. When you open a link, the respective provider processes connection data under its own privacy notice.

11. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing before withdrawal.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation under Article 21 GDPR. For direct marketing, the right to object applies without this restriction.

To exercise your rights, contact me using the details above. You may also lodge a complaint with a data protection supervisory authority under Article 77 GDPR, particularly in the place of your habitual residence, place of work or the alleged infringement. No automated decision-making within the meaning of Article 22 GDPR takes place.

12. Updates

Last updated: 1 November 2026. This notice will be adapted when the website or the services used change.

Home · Legal notice · Privacy