Privacy policy

Controller

At a glance

This website sets no cookies, uses no tracking or analytics, embeds no third-party content or fonts and has no forms. Fonts and images are served by this website itself.

Hosting

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered from a data centre in Frankfurt am Main, Germany.

When you open a page, Vercel processes technically necessary data in server log files: IP address, date and time, the page requested, the previous page (referrer), and browser and operating system. This serves only to deliver and secure the website. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is secure and stable operation.

A data processing agreement with Vercel is in place (Art. 28 GDPR). Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses. Log data is kept only as long as needed for operation and security.

Local storage in your browser

If you switch between the light and dark colour scheme, your choice is saved under the key “theme” in your browser's local storage. It never leaves your device and is not sent to me. Storing it is strictly necessary for the function you requested (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

Contact by email or phone

If you contact me by email or phone, I process your details to reply, for example in the context of a job application or project enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. I delete the data once it is no longer needed and no statutory retention obligations apply.

I receive email through Google (Gmail), operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Links to other platforms

The links to LinkedIn, Xing and Behance are plain links. Data is only sent to the respective provider once you click one; their privacy policy then applies.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Just contact me.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection of Saxony-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany.