LEGAL — PRIVACY PROTOCOL

privacy.

1 — Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Leon Hartling
Hahnweg 62
96450 Coburg, Germany
Email: leonhartling96@googlemail.com
Phone: +49 157 5313 7312

2 — Overview

This is a static portfolio website. It uses no cookies, no browser storage such as Local Storage, no analytics, tracking or advertising services, no externally embedded content, and no contact form. Fonts, images, and scripts are served locally.

Personal data are processed only where technically necessary to deliver the website through the hosting provider, or when you choose to contact me by email or phone or follow an external link.

3 — Hosting by Vercel

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (“Vercel”).

When the website is requested, Vercel may process in particular the IP address, date and time, requested file or URL, HTTP status, referrer URL, browser and device information, operating system, system configuration, and an approximate location derived from the IP address.

This processing serves the secure, stable, and efficient delivery of the website and the detection of errors and abuse. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and technically reliable publication of my portfolio. Recipients are Vercel and the subprocessors Vercel uses to provide its services. I do not combine these data with other sources or use them for visitor analytics.

I do not create separate access logs. Retention at Vercel depends on the type of log, plan, and configuration. Vercel states that it retains personal data only as long as necessary for contractual and legal obligations and legitimate business purposes. More information is available in Vercel’s Privacy Notice.

Processing in the United States is possible. Where data are transferred to an entity certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision under Article 45 GDPR. For transfers not covered by that framework, Vercel states that it uses appropriate safeguards, in particular standard contractual clauses under Article 46 GDPR.

4 — Language and audio features

The initial language is selected from your browser’s language setting. If you switch languages manually, the selection is represented only as a parameter in the current URL. No cookies or browser storage are used for this purpose.

After you expressly activate them, the audio features generate sounds locally in your browser through the Web Audio API. The website does not access your microphone, records nothing, and transmits neither audio nor interaction data.

5 — Contact

If you contact me by email or phone, I process the information you provide — for example your name, contact details, and message — to handle your inquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual matters and otherwise Article 6(1)(f) GDPR. The legitimate interest is responding to your inquiry.

I use a Google service for email. Messages and metadata may therefore be processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and affiliated companies. Processing in the United States is possible. Google refers to the EU-U.S. Data Privacy Framework and, where required, standard contractual clauses. More information is available in Google’s Privacy Policy and its information on international data transfers.

The data are deleted once the inquiry has been fully handled and no contractual, statutory, or evidentiary retention reasons remain. If the communication forms part of contractual records, the applicable statutory retention periods apply.

6 — External links

This website links to external project websites and to GitHub, SoundCloud, Instagram, and Google Drive. A connection to these providers is established only when you actively click a link. The respective provider will then generally process at least your IP address and technical connection data under its own responsibility. The referrer policy set for this website prevents the address of the previously visited page from being transmitted. The respective provider’s privacy information applies.

7 — Your rights

Subject to the statutory requirements, you have in particular the following rights:

You may object at any time, on grounds relating to your particular situation, to processing based on my legitimate interests. I will then no longer process the data concerned unless compelling legitimate grounds or reasons relating to the establishment, exercise, or defense of legal claims apply.

You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR). For private-sector bodies in Bavaria, the competent authority is in particular the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8 — Provision of data and automated decisions

There is no statutory or contractual obligation to provide personal data when visiting this website. The technically necessary connection data must, however, be processed for the website to be delivered. Contact is voluntary; without sufficient contact details, I may be unable to respond to your inquiry. No automated decision-making, including profiling, takes place.

9 — Version

This privacy notice is current as of September 2026. I will update it if the website’s features, services, or legal requirements change.

RETURN TO INDEX →