Legal & Privacy

Hosting and access data

The hosting provider is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit this website, STRATO processes your IP address and technical access data, including the time of access, requested file, response status, data transferred, browser details and any referring page supplied by your browser.

This data is processed to deliver the website and detect and prevent attacks. The legal basis is Article 6(1)(f) of the GDPR. My legitimate interest is the reliable and secure operation of my portfolio. Connection data is technically necessary to display the website.

According to STRATO, IP addresses used to detect and prevent attacks are retained for a maximum of seven days. STRATO states that IP addresses or hostnames in access logs made available to website owners are anonymised. These logs are available for six weeks; statistics generated from them can cover up to 400 days.

Further information: STRATO hosting and data protection and access logs and statistics.

Password-protected access

The server checks the password before providing access to the portfolio or its files. The password hash and the portfolio files are stored outside the public website directory.

A technically necessary session cookie keeps you signed in. It contains a random session identifier, not the password, and expires when you close your browser or after 12 hours of inactivity. You can sign out at any time. To limit repeated login attempts, the server temporarily stores a pseudonymous identifier derived from the requesting IP address, the number of failed attempts and their time. The counters reset after 15 minutes; older records are removed during subsequent login attempts. The legal basis for these security measures is Article 6(1)(f) of the GDPR.

Fonts, images and cookies

All fonts and logos are served from the same server as this website. No external font services, analytics tools, advertising trackers or videos are embedded. Apart from the login session cookie described above, the website does not set cookies or store data in local storage. Pausing the logo carousel only affects the page currently open.

External websites are opened only when you follow a link.

Contact by email

If you email me, I process your email address and message to respond to your enquiry. Email links open your email application; this website has no contact form.

The legal basis for handling general enquiries is Article 6(1)(f) of the GDPR. My legitimate interest is responding to enquiries about my work and maintaining professional contacts. Providing this information is voluntary. Without a contact address and the relevant details, I may be unable to respond.

I use a personal Gmail account provided in the European Economic Area by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to receive and reply to emails. Google processes email content and associated metadata as part of that service. Processing may also take place outside the European Economic Area. Google describes the safeguards it uses for international transfers in its privacy frameworks information.

I keep professional correspondence for as long as it remains relevant to our professional contact, unless a legal obligation requires longer retention. I review whether messages are still needed and delete them when they are not.

Automated decisions

I do not use data received through this website or through contact with me for automated decision-making under Article 22 of the GDPR or for profiling.

Your rights

Subject to the applicable legal conditions, you have the right to access, rectify or erase your personal data, restrict its processing and request data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.

You may lodge a complaint with a data protection authority, particularly in the country of your habitual residence, place of work or the alleged infringement. In Saxony, this is the Saxon Data Protection and Transparency Commissioner.