Nudge Patterns

Privacy policy

Which data is processed when you visit Nudge Patterns, on what basis, and which rights you have.

This English version is a convenience translation. The German version is authoritative.

Controller

The controller for the processing of personal data on this website is Stephan Weibelzahl, Claus-Hartung-Eck 17, 37083 Göttingen, Germany. Contact details are in the imprint.

Overview

We process the data necessary to operate the website. To finance it, we show advertising via Google AdSense, for which the website loads scripts from Google. We use cookies and similar technologies that are not strictly necessary only with your consent, which we record through a consent management tool provided by Google. We use no analytics tools and no external fonts.

Hosting and server log files

The website is hosted by Netlify, Inc. (San Francisco, USA). When a page is requested, the host processes technically necessary connection data in server log files, in particular IP address, date and time, requested page, referrer URL, and browser and operating system. This is necessary to deliver the website securely and reliably.

The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). A data processing agreement exists with the host. For transfers of data to the USA, Netlify states that it relies on its participation in the EU-US Data Privacy Framework and on standard contractual clauses. Further information is available in Netlify’s privacy notices.

Contact by email

If you write to us by email, we process your details to answer your request. The legal basis is our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR) or, where a contract is concerned, Art. 6(1)(b) GDPR. We delete the data as soon as it is no longer needed for the purpose and no retention obligations stand in the way.

The pages contain links to studies (for example via doi.org) and to other websites. When you click a link, you leave our website. The respective operators are responsible for data processing there.

Fonts

The fonts used are stored on our own server. No connection to font providers such as Google is established when a page is loaded.

On your first visit, a notice asks whether you consent to processing for advertising purposes. This notice is provided by Google’s consent management tool (“Privacy & messaging”, a Google-certified consent management platform under the IAB Europe Transparency and Consent Framework). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Your choice is stored in a cookie or in your browser’s storage so that we can respect and demonstrate it on later visits. Technical data such as your IP address and browser information is also transmitted to Google in the process. The legal basis is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). Storing the choice on your device is strictly necessary for this (Section 25(2) no. 2 TDDDG).

You can change your choice or withdraw your consent at any time via the “Privacy settings” link at the bottom of every page.

Advertising with Google AdSense

We show ads via Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The revenue funds the operation and research of this website. Ads are labelled “Advertisement”. We have no influence on their content.

When you open a page with ads, your browser loads scripts from Google and connects to Google’s servers. In particular, the following may be processed: IP address, browser and device information, the page requested and the referrer URL, date and time, approximate location, and your interactions with ads. Google uses cookies and similar technologies such as device identifiers for this.

Which ads you see depends on your choice in the consent management tool:

  • With consent, ads may be personalised, i.e. based on interests that Google derives from your use of websites and apps. Google and its advertising partners may also process data to measure and improve ads.
  • Without consent, Google states that it serves only limited ads that do not rely on cookies for advertising purposes and are based, for example, on the page content. A technical connection to Google is still established.

The legal basis for storing and reading information on your device is your consent (Section 25(1) TDDDG), and for the further processing likewise your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future (Art. 7(3) GDPR) via the “Privacy settings” link at the bottom of every page. Where ads are served without consent, we rely on our legitimate interest in financing the website (Art. 6(1)(f) GDPR).

Google states that it processes the data as an independent controller. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; Google additionally relies on standard contractual clauses. How long Google stores the data is determined by Google’s own information.

Further information:

The ads.txt file on this website identifies Google as an authorised seller of our ad space. It contains no personal data.

We currently offer no newsletter and use no affiliate links. Before we introduce either, we will update this policy.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Please contact the address given in the imprint, or use the “Privacy settings” link for advertising consent.

You also have the right to lodge a complaint with a data protection supervisory authority. For Lower Saxony this is the State Commissioner for Data Protection of Lower Saxony.

Currency

As of 13 November 2026. We adapt this policy when our offering or the legal situation changes.