Privacy Policy
Last updated: 2026-07-22
Controller
The controller for the processing described here is Ilja Bytschok-Edler von Hoessle, sole proprietor (see the Imprint). Contact: hello@ilja.tax.
What I process and why
Contact and quote requests. When you write to me or use the form, I receive the details you submit (such as your email and your message) and use them only to reply and prepare a quote. There is no account, login, or file upload on this site. Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.
Engagement data. If you engage me, you send the data needed for the work (such as exchange exports and wallet addresses). I use it only to produce your documentation and keep it stored end-to-end encrypted on Proton Drive (Proton AG, Switzerland). It is deleted once the contractual obligations are fulfilled, and immediately on request. I never sell or share it. Legal basis: Art. 6(1)(b) GDPR.
Website operation.The server keeps short-lived logs (IP, request, timestamp) for security. The site sets only one technically necessary cookie: NEXT_LOCALE, which stores your language choice; it is not used for tracking. No analytics are used. Legal basis: Art. 6(1)(f) GDPR; § 25(2) no. 2 TDDDG.
Protection against automated requests.The contact form and the balance-proof tool use Cloudflare Turnstile (Cloudflare, Inc., USA) to tell requests from people apart from requests from bots. For this, Cloudflare processes technical characteristics of your request, such as IP address, browser identifier (user agent) and TLS characteristics. In the balance-proof tool this happens before every lookup. Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in preventing misuse of the form and the tool; § 25(2) no. 2 TDDDG.
Balance-proof tool. When you use the tool, the wallet address or ENS name you enter is sent to the node provider Alchemy (Alchemy Insights, Inc., USA) to read the balances from the blockchain; I do not store or log the address. To keep the tool available to everyone, I count lookups per connection: a hash is formed from your IP address, for IPv6 from its first 56 bits, held only in memory and dropped after 24 hours. The tool sets no cookies. Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.
Hosting and transfers
The site is hosted on a server in the EU; the hosting provider processes technical data (such as server logs) on my behalf. Email runs through Proton Mail and engagement data is stored on Proton Drive (both Proton AG, Switzerland); the European Commission has issued an adequacy decision for Switzerland (Art. 45 GDPR). For the balance-proof tool, wallet addresses are transmitted to Alchemy Insights, Inc. (USA) on the basis of appropriate safeguards (Art. 46 GDPR); a wallet address is a public blockchain identifier that carries no name. For protection against automated requests, technical data is transmitted to Cloudflare, Inc. (USA); Cloudflare is certified under the EU-U.S. Data Privacy Framework, and the transfer relies on the European Commission's adequacy decision for it (Art. 45 GDPR).
Retention
I keep contact requests only as long as needed to handle them and meet legal record-keeping duties. Engagement data (raw data and intermediate calculations) is deleted once the contractual obligations are fulfilled, and immediately on request. Only the final documentation and the methodology version are retained. Server logs are kept only briefly.
Your rights
Under the GDPR you may request access to, correction of, or deletion of your data, restrict or object to processing, and receive your data in a portable format. You may also lodge a complaint with your data protection authority. To exercise any of these, email hello@ilja.tax.