Privacy
Privacy notice
How personal data is handled when you visit this personal academic website or contact its operator.
Responsibility
Data controller
Jannes Kordilla
c/o Institute of Environmental Assessment and Water Research (IDAEA–CSIC)
C. Jordi Girona, 18–26
08034 Barcelona
Spain
Jannes Kordilla is the controller responsible for this personal website. IDAEA–CSIC is his employer and professional contact location, but does not operate or publish this website.
Infrastructure
Hosting, server logs and security
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The hosting provider processes data needed to deliver and protect the website.
When a page is requested, the server can record the visitor’s IP address, date and time, requested page or file, access status, transferred data volume, referring page, browser, operating system, interface language, and software version. These logs are used to deliver the website, maintain stability, and detect misuse or attacks. The legal basis is Article 6(1)(f) GDPR: the operator’s legitimate interest in providing a reliable and secure website.
According to ALL-INKL, regular server-log data is deleted after seven days at the latest. Relevant records may be kept longer in an individual security or abuse case. Hosting data is processed in ALL-INKL’s data centre in Germany. Further details are available in the ALL-INKL privacy policy ↗.
Wordfence Security
This website uses Wordfence Security to operate a web-application firewall, detect malicious requests and login attempts, scan website files, and respond to security incidents. For these purposes, Wordfence can process data including IP addresses, requested URLs, timestamps, request headers, and security or login events.
Security-related traffic records are kept locally for no longer than 30 days unless an identified incident requires longer investigation or documentation. Depending on the security function involved, relevant information may also be communicated to Defiant, Inc., the provider of Wordfence, in the United States for threat detection and protection. Defiant provides a data-processing addendum and Standard Contractual Clauses for this processing. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in protecting the website, its administration, and visitors against attacks and misuse.
Wordfence does not set an analytics cookie for ordinary public visitors. It can set technically necessary security cookies for authorised users who sign in and for specifically configured security functions. Further information is available in the Wordfence GDPR information ↗, privacy policy ↗, and data-processing addendum ↗.
Measurement
Privacy-friendly audience measurement
This website uses the self-hosted Koko Analytics plugin to count page views, estimate unique visits, and understand which pages and referring sources are used. Koko is configured in cookieless mode. It does not place analytics cookies on visitors’ devices and does not send the collected audience statistics to an external analytics provider.
To distinguish visits without a cookie, Koko temporarily creates a one-way hash from the visitor’s IP address, browser user-agent information, and a secret value that changes every day. Koko does not retain the underlying IP address or user-agent information in its analytics data, and the temporary visitor-identification data is cleared daily. Visits cannot be linked across different days through this identifier.
Aggregated page-view, visit, page, and referrer statistics are stored in this website’s WordPress database indefinitely so that long-term changes in website use can be evaluated. They are deleted if the statistics are manually reset or the analytics installation is permanently removed. This indefinite retention applies only to the aggregate reporting data; the temporary cookieless visitor identifier described above is still cleared daily.
The statistics are used only to understand overall website use and improve the website; they are not used for advertising, profiling, or attempts to identify individual visitors. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in privacy-conscious measurement and long-term evaluation of this non-commercial academic website. Details of the tracking and retention settings are available in the Koko Analytics tracking documentation ↗ and data documentation ↗.
The operator may additionally view aggregated Webalizer reports that ALL-INKL generates from the server-access logs described above. No Google Analytics, Matomo, advertising technology, tracking pixels, or visitor profiling are used.
No non-essential cookies are intentionally set for ordinary public visitors. WordPress and Wordfence may set technically necessary administration or security cookies when an authorised user signs in; these cookies are not used for public visitor analytics.
Communication
Email contact
If you contact the operator by email, your email address, message, time of communication, and any attachments are processed to answer your enquiry. There is no contact form on this website.
The legal basis is Article 6(1)(f) GDPR, the legitimate interest in responding to enquiries, or Article 6(1)(b) GDPR when the communication concerns steps before or performance of a contract. Correspondence is deleted when the enquiry has been resolved and it is no longer needed, unless a legal retention duty or a legitimate documentation need applies.
Your choices
External links and your rights
External websites
This website links to external websites but does not load their content before you choose to follow a link. After you leave this website, the external provider’s privacy terms apply.
Data-protection rights
Subject to the conditions in applicable law, you may request access to, correction or deletion of, or restriction of processing of your personal data. You may also object to processing based on legitimate interests and request data portability where applicable. This website does not use automated decision-making or profiling.
To exercise these rights, contact jannes.kordilla@csic.es. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) ↗.
This notice describes the current configuration. It must be reviewed before changing the analytics tracking method or adding embedded third-party media, forms, comments, newsletters, or other services that process visitor data.
Last updated: 29 July 2026