Privacy Policy

1. Controller

The controller responsible for data processing on this website is Edwin Schiller. You can reach me via the contact form on the homepage.

2. General information

I only process personal data to the extent necessary to operate this website, respond to inquiries, or comply with legal obligations. This website does not use analytics, marketing, or tracking cookies.

3. Hosting

This website is hosted by Vercel Inc. When you visit the site, technically necessary data may be processed, such as your IP address, the date and time of access, the requested page, and browser or device information.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). More information: vercel.com/legal/privacy-policy.

4. Server logs and rate limiting

When you use the contact form, your IP address may be processed temporarily on the server for abuse prevention (rate limiting) and stored in a server-side cache provided by Vercel for a limited period.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the contact form from misuse).

5. Contact form

If you use the contact form, I process the data you provide (name, email address, and message) solely to handle your request and reply to you. Messages are sent via Resend. More information: resend.com/legal/privacy-policy.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Data is deleted once your request has been handled, unless statutory retention obligations apply.

6. Fonts

Fonts on this website are served locally through Next.js. No connections to Google servers are established when pages are loaded.

7. Cookies

This website does not set cookies for analytics, marketing, or convenience purposes, and does not use tracking tools.

8. External links

This website contains links to external profiles and websites (for example LinkedIn, GitHub, and Instagram). When you follow those links, you leave this website. The respective operators are solely responsible for data processing on those external sites.

9. Your rights

Under the GDPR, you have the right to:

• access your personal data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

To exercise these rights, please contact me via the contact form.

10. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. In Saxony, Germany:

Sächsischer Datenschutzbeauftragter
Devrientstraße 5, 01067 Dresden
www.saechsdsb.de

11. Changes

I may update this privacy policy if the website, services used, or legal requirements change.