Who runs this website, and how it handles your data.
Legal Notice
This website is provided by:
Stephan Dilchert
Department of Management
Baruch College
Box B9-250
New York, NY 10010
United States
About this site
This is my personal academic website. It is not an official website of Baruch College or the City University of New York, and the views expressed here are my own.
Content and links
I prepare the content of this site with care, but I cannot guarantee that it is complete, accurate, or current. This site links to external websites. Their operators alone are responsible for their content, over which I have no control. If I learn that a linked page contains unlawful content, I will remove the link.
Copyright and article copies
Unless noted otherwise, the text, images, and other materials I created for this site are © Stephan Dilchert. All other images used on this site are in the public domain. Published articles remain subject to the copyright of their respective publishers. Copies of articles obtained through this site are provided for personal, non-commercial scholarly use only. They may not be reposted, redistributed, or used for commercial purposes. Please cite the published version of record.
Privacy Policy
At a glance
- No analytics, tracking, advertising, or social media plugins.
- Only strictly necessary cookies, so no cookie banner.
- Nothing is loaded from third-party servers, including fonts.
- I collect your name and email address only if you request article copies, and use them only to send you the download links.
- I do not sell, rent, or share your personal information.
1. Who is responsible
I, Stephan Dilchert (contact details above), am responsible for the processing of personal data on this website. Under the EU General Data Protection Regulation (GDPR), I am the “controller.”
2. Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers located in Germany. Strato processes data on my behalf under a data processing agreement (Art. 28 GDPR).
Whenever you visit the site, the server automatically records technical information that your browser sends:
- IP address
- Date and time of access
- Page or file requested
- Amount of data transferred and whether the request succeeded
- Browser type and version, operating system
- Referring page, if any
This information is needed to deliver the website, keep it running reliably, and protect it against attacks (legitimate interest, Art. 6(1)(f) GDPR). It is not combined with other data or used to identify individual visitors. Log files are deleted automatically after seven days.
3. Security
This site uses the security plugin Wordfence, provided by Defiant, Inc. (USA), to protect against hacking attempts and abuse. Wordfence inspects incoming requests, including IP addresses and the pages requested, and blocks suspicious activity. Information about blocked or suspicious requests, including the IP address involved, may be shared with Defiant to keep Wordfence’s threat data current. This serves my legitimate interest in a secure website (Art. 6(1)(f) GDPR).
4. Cookies
This site uses only cookies that are strictly necessary for features you actively use. It does not use cookies for analytics, advertising, or tracking, which is why there is no cookie banner. Under EU rules, strictly necessary cookies do not require consent.
- Download cart: When you add an article to the download cart, a session cookie and a cart cookie remember your selection while you browse. They expire automatically and are not used for any other purpose.
- Site administration: WordPress and Wordfence set cookies only for logged-in administrators. They do not affect visitors.
You can block or delete cookies in your browser settings, but the download cart will not work without them.
5. Requesting article copies
If you request copies of my articles through the download cart, I collect:
- Your name and email address
- The articles you requested, and the date and time of the request
- The IP address used for the request and for each download
I use this information only to send you the download links by email, to make the links work, and to prevent misuse of the download service. Processing is necessary to fulfill your request (Art. 6(1)(b) GDPR). Recording IP addresses serves my legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Providing your name and email address is voluntary, but without them I cannot send you the links.
The emails are sent from this website through Strato’s mail servers in Germany, and I may receive a notification of each request. I do not use your email address for newsletters or any other purpose, and I do not pass it on. Request records are deleted or anonymized after 24 months.
6. Contacting me by email
If you email me, I use your message and contact details only to respond. Messages are handled through Baruch College’s email system in the United States (Art. 6(1)(f) GDPR).
7. Search engines
This site uses the plugin Yoast SEO to provide descriptive information to search engines, such as page titles and a sitemap. Yoast SEO does not set cookies or collect data about visitors.
8. International data transfers
I am based in the United States and administer this site from there. The website and the data it collects are stored in Germany, but I access them from the United States, for example when I review download requests. Information about suspicious requests may also be shared with Defiant, Inc. in the United States (see Security). Beyond that, personal data is transferred to the United States only as far as necessary to fulfill your request or answer your message (Art. 49(1)(b) GDPR).
9. Your rights
Wherever you live, you can ask me what personal data I hold about you and ask me to correct or delete it. An informal email to the address above is enough.
If you are in the EU or EEA, the GDPR also gives you the right to restrict processing, to data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority, in particular in your country of residence (Art. 77 GDPR).
10. Children
This site is not directed at children under 13, and I do not knowingly collect personal information from them.
11. Changes
Effective November 2026. I will update this policy when the website changes.