Skip to content
~/moritzsamrock_
  • Home
  • Blog
  • Press
ENDE

legal

Privacy Policy

This English version is provided for convenience. The legally binding version is the German Datenschutzerklärung.

Controller

Moritz Samrock, Josef-Wirmer-Str. 13, 53123 Bonn, Germany. Contact details and further information are provided in the Imprint.

Server log files

When you access this website, the web server automatically stores information in so-called server log files. This includes: the IP address of the requesting device, the date and time of the request, the specific page requested, the HTTP status code, the amount of data transferred, the transmitted user agent (browser and operating system) and, where available, the referring page (referrer).

This data is used solely for technical operation, security and the detection and resolution of faults and abuse. It is not merged with other data sources or evaluated for marketing or analytics purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). The log files are deleted automatically after [define retention period, e.g. 7 days].

Cookies

This website uses exclusively technically necessary first-party cookies. No cookies are set for advertising or marketing purposes, and no third-party cookies are used. Specifically:

  • Language cookie: stores the language you selected so the site is shown in the correct language version.
  • Technical session cookie: serves solely the technical functioning of the site and the internal check that it works correctly. It contains no personal profile and is not evaluated for advertising.

As these are technically necessary cookies, no consent is required (Section 25(2) TDDDG). Insofar as personal data is processed, the legal basis is Art. 6(1)(f) GDPR.

External content and YouTube videos

Apart from the YouTube embedding described below, no external content, fonts, scripts or third-party services are loaded. All other resources are served exclusively by our own server.

YouTube videos are embedded using a privacy-friendly two-click solution. When a page loads, no connection to YouTube or Google is made, and no preview image is fetched from Google. Only when you actively start a video by clicking is the content loaded from youtube-nocookie.com (privacy-enhanced mode). From that point, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland processes data (including your IP address, device information and possibly cookies) under its own terms. The legal basis for this loading is your consent given by the click (Art. 6(1)(a) GDPR), which you can withdraw with effect for the future. More information: policies.google.com/privacy.

Newsletter and email delivery (Brevo)

If you sign up for the newsletter, we process the data you provide (first name, last name and email address) together with a timestamp and the page you signed up from. Signup uses a double opt-in: you first receive a confirmation email and are only added to the list after clicking the confirmation link. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future and unsubscribe, for example via the unsubscribe link in each message or via the contact details in the Imprint. Your data is stored until you unsubscribe.

We use Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) as a processor for managing our contact list and for sending newsletter and transactional emails (e.g. the confirmation email). Your contact details and technical delivery data (e.g. delivery status) are processed on servers within the EU on the basis of a data processing agreement pursuant to Art. 28 GDPR. More information: Brevo's privacy policy.

SSL and TLS encryption

For security reasons this website uses TLS/SSL encryption, recognizable by https:// in your browser's address bar. This prevents third parties from reading the data transmitted between your browser and the server.

Hosting

The site is hosted with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers located in Germany. In the course of handling requests Hetzner processes technically necessary data (including IP address and access timestamps); a data processing agreement pursuant to Art. 28 GDPR is in place with the provider. More information: Hetzner's privacy policy.

Your rights

Within the statutory limits you have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). Where processing is based on your consent, you can withdraw it at any time with effect for the future. To exercise your rights, a message to the contact details in the Imprint is sufficient. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Changes to this privacy policy

We update this privacy policy whenever changes to the website or to the data processing make it necessary. The current version published here applies. Last updated: August 2026.

Moritz Samrock

Hacker. Officer. Entrepreneur.

  • LinkedIn
  • YouTube
  • Email

Navigate

  • Home
  • Blog
  • Press
  • Search
  • Glossary
  • Imprint
  • Privacy

$ subscribe --newsletter

Occasional notes on offensive security, building companies and what I'm learning. No spam.

© 2026 Moritz Samrock. All rights reserved.

Moritz Samrock: Cybersecurity Hacking Entrepreneurship