Privacy

Data controller

Vincent May

Postal address: Legal notice / Impressum

Overview

The portfolio application is a static website. It does not itself set cookies, serves its fonts and application scripts locally, and includes no analytics or tracking services. It is delivered through Cloudflare Pages.

Server logs

When the site is requested, the hosting provider processes technically necessary data such as IP address, request time and requested file. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is providing a reliable, secure website and preventing misuse.

This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes request data to deliver, secure, and maintain its service.

Cloudflare does not publish one retention period for all request data. Its privacy policy determines retention according to the processing purpose, the nature and sensitivity of the data, and legal or contractual obligations. Once the applicable period ends, data is deleted or destroyed; where this is not yet technically possible, further use is prevented.

Data may also be processed in the United States. Cloudflare states that it relies on its EU-US Data Privacy Framework certification for transfers from the European Economic Area to the US, and uses standard contractual clauses for other international transfers. Its privacy policy provides details of these safeguards.

Further information: Cloudflare privacy policy

Getting in touch

Writing by email transmits your address and the content of your message. These data are used to answer the enquiry; email providers participate in technical delivery and storage. The legal basis is the legitimate interest in responding to enquiries under Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for concrete contractual enquiries.

Correspondence is retained for handling the enquiry and necessary follow-up, and for any applicable statutory retention requirements.

Your rights

Subject to the applicable legal conditions, you have rights to access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Contact: [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority, including the authority in your country of residence or work. The authority for North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW): LDI NRW