Privacy policy

2. Summary

This website is a personal portfolio. There are no user accounts, no contact form, no comment function and no newsletter.

We do not use any analytics, tracking or advertising technologies, and we do not embed third-party content such as videos, maps, social media widgets or externally hosted fonts. For that reason this website does not need a consent banner.

The only data processed is the technically necessary access data recorded by our hosting provider, plus two purely functional settings stored in your browser.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the data arising when you access the website on our behalf, on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The legal basis for this processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing this website reliably, securely and with good performance.

Personal data may be transferred to the USA in the process. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission issued an adequacy decision under Art. 45 GDPR on 10 July 2023. In addition, we have agreed the European Commission's Standard Contractual Clauses with Vercel pursuant to Art. 46 (2) (c) GDPR.

4. Server log files

Each time this website is accessed, our hosting provider automatically records information transmitted by your browser:

• the IP address of the requesting device
• the date and time of the request
• the specific page or file requested
• the HTTP status code and the amount of data transferred
• the previously visited page (referrer), if your browser sends it
• browser type, browser version and operating system

This data is technically required in order to deliver the website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the stability, security and correct operation of the site.

This data is not merged with other data sources, is not evaluated for marketing purposes and is not used to build profiles.

We do not evaluate the log data ourselves and do not keep a separate copy of it. It is stored solely within our hosting provider's infrastructure, which deletes it automatically according to its own product- and plan-dependent retention periods. Beyond that, the data is only kept for as long as is necessary to investigate a specific security incident.

5. Cookies and local browser storage

This website stores exactly two values on your device. Both exist solely to preserve settings you chose yourself:

• NEXT_LOCALE (cookie): stores the language you selected (German or English). Lifetime: 12 months. This cookie is sent to the server with every page request so that the site can be delivered in the correct language.
• theme (local storage): stores whether you selected the light or dark appearance. Retention: until you clear your browser storage. This value never leaves your browser and is not transmitted to the server.

Both entries are strictly necessary in order to provide a service you have explicitly requested, namely the language and appearance you selected. Storing and reading them therefore does not require your consent, pursuant to § 25 (2) no. 2 TDDDG. The legal basis for the subsequent processing is Art. 6 (1) (f) GDPR.

No cookies are set for analytics, audience measurement or advertising purposes. You can delete both entries at any time via your browser settings; the website will continue to work and simply fall back to its defaults.

6. Automatic language selection

If you open the website without a language in the address, the server evaluates the Accept-Language header sent by your browser once and redirects you to the matching language version. This value is processed only for the duration of the request and is not stored.

The legal basis is Art. 6 (1) (f) GDPR, with our legitimate interest in presenting the website in a language you understand.

7. Fonts

This website uses the Inter and JetBrains Mono typefaces. Both are served exclusively from our own server and are bundled into the site at build time.

As a result, no connection to Google servers is established when you visit this website, and in particular no IP address is transmitted to Google.

8. Contact by email

This website lists an email address for getting in touch. If you write to us, we process the data you send, namely your email address, your name and the content of your message, solely in order to handle your enquiry.

Our mailbox is operated by united-domains AG, Gautinger Str. 10, 82319 Starnberg, Germany. The provider processes the content and connection data of your message on our behalf pursuant to Art. 28 GDPR. This processing takes place within the European Union, so no transfer to a third country occurs in this respect.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and Art. 6 (1) (f) GDPR in all other cases, with our legitimate interest in responding to enquiries.

We delete this data once your enquiry has been dealt with conclusively and no statutory retention obligations apply, for example under § 147 AO or § 257 HGB.

9. Links to external sites

This website links to external sites, including GitHub, LinkedIn, YouTube and the websites of current and former employers. Content from these providers is not embedded into our pages.

Data is therefore only transmitted to these providers once you actively click such a link. From that point on, the privacy policy of the respective provider applies, over whose processing we have no influence.

10. Encrypted transmission

This website is served exclusively over a TLS-encrypted connection (HTTPS), which you can recognise in your browser's address bar. This prevents third parties from reading the data transmitted between your device and our server.

11. Your rights

You have the following rights with regard to the personal data concerning you:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw a given consent with effect for the future (Art. 7 (3) GDPR)

An informal message to the email address given above is enough to exercise these rights.

12. Right to object

Where we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.

If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

13. Right to lodge a complaint

Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

The supervisory authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

14. No automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

15. Changes to this privacy policy

We update this privacy policy whenever the legal situation or the services used on this website change. The version published here is the one that applies.