Overview
This is a personal portfolio website (reference Imprint). There are no
contact forms, no accounts, and no cookies. The only data processed is the connection data
required to deliver the site, and aggregated, non-identifying statistics about how it's used.
Hosting
This website is hosted on Cloudflare's edge network (Cloudflare, Inc., USA). Delivering any page to
your browser necessarily involves processing your IP address, browser/device information, the requested
page, and the time of access — standard connection data for any website. - Purpose & legal basis:
operating and securely delivering this website, based on legitimate interest in a functioning, secure
site (Art. 6(1)(f) GDPR). - Recipient: Cloudflare, Inc., acting as a data processor. - International
transfer: as a global edge network, this data may be processed outside the EU/EEA, including in the
US — safeguarded by Cloudflare's Data Processing Addendum, which incorporates the EU Standard Contractual
Clauses.
Analytics
This website uses Rybbit, a web analytics tool self-hosted on infrastructure located in Germany, under
my sole control. No data is shared with Rybbit's developers or any other third party. - Cookies: none.
Rybbit sets no cookies and stores no identifier on your device. - IP addresses: not stored. Your IP
is processed only momentarily to receive the request, then discarded. - Data collected: general, non-identifying
usage statistics only (e.g., approximate visit counts and page popularity) — nothing that can be linked
back to you individually. - Purpose & legal basis: understanding how the site is used, to improve
it, based on legitimate interest in aggregate usage insight that doesn't affect visitor privacy (Art.
6(1)(f) GDPR).
Your rights
You have the right to request access, rectification, erasure, or restriction of processing of your
data, and to data portability where applicable (Art. 15, 16, 17, 18, 20 GDPR). You also have the right
to object, at any time, to the processing described above, since it is based on legitimate interest
(Art. 21 GDPR). To exercise any of these rights, contact the site owner. You may also lodge a complaint
with a data protection supervisory authority, in particular in the EU/EEA member state of your habitual
residence, place of work, or the place of the alleged infringement (Art. 77 GDPR). Given the nature
of this website, most of these rights have limited practical effect, since no data is stored that
identifies you individually.
Changes
This policy may be updated to reflect changes in how the website operates; the date above reflects
the most recent revision.