Privacy Policy

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is the person named in the Imprint.

Overview of Data Processing

This is a personal portfolio and resume website. It does not use cookies, tracking tools (such as Google Analytics, Matomo/Piwik, or similar), social media plugins, comment systems, newsletter signups, or contact forms. All fonts and images are hosted locally — no external resources are loaded from third-party servers when you visit this website.

Hosting and Content Delivery Network (CDN)

This website is hosted using Amazon Web Services (AWS), specifically Amazon S3 (storage) and Amazon CloudFront (content delivery network / CDN). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg.

When you access this website, a connection to AWS CloudFront servers is established. CloudFront is a globally distributed CDN, meaning that your request may be processed by a server geographically close to you, which could be located outside the European Union. The origin server (S3 bucket) is located in the AWS region eu-central-1 (Frankfurt, Germany).

CloudFront Access Logs: Access logging is enabled on the CloudFront distribution. This means that for each request, the following data is recorded and stored in an S3 bucket:

• The requesting IP address (anonymized or full, depending on configuration)
• Date and time of the request
• Requested URL / resource
• HTTP status code
• Amount of data transferred
• Referrer URL (if transmitted by the browser)
• User agent string (browser and operating system information)
• The CloudFront edge location that served the request

These logs are collected for the purpose of ensuring the security and stability of the website, for error diagnosis, and for protection against misuse. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest). My legitimate interest lies in the secure and reliable provision of this website. Log data is not merged with other data sources and is regularly deleted. The retention period for log files is 30 days, after which they are automatically deleted.

Data transfer to third countries: Due to the nature of the CloudFront CDN, data transfers to servers outside the European Economic Area (EEA) may occur, including to the United States. AWS participates in the EU-U.S. Data Privacy Framework (DPF), and I have entered into a Data Processing Agreement (Auftragsverarbeitungsvertrag) with AWS in accordance with Art. 28 GDPR. Additionally, AWS provides appropriate safeguards through Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Further information on AWS data protection can be found at: https://aws.amazon.com/privacy/

No Cookies

This website does not set any cookies — neither technically necessary ones, nor analytics or marketing cookies. No cookie consent banner is therefore required or displayed.

No Tracking or Analytics

This website does not use any tracking or analytics tools. No user behavior is analyzed, no profiles are created, and no data is shared with advertising networks or analytics providers.

External Links

This website contains links to external websites, including my LinkedIn profile and my email address. When you click on a link to an external website, you leave this website and are subject to the privacy policy of the respective external provider. I have no control over the data processing carried out by these external providers. Specifically:

• LinkedIn: If you click the link to my LinkedIn profile, you will be redirected to linkedin.com, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn's privacy policy applies: https://www.linkedin.com/legal/privacy-policy
• Email: If you use the email link (mailto link) to contact me, your email provider will process the transmission. Once I receive your email, I will process the personal data contained therein (e.g., your name, email address, and the content of your message) solely for the purpose of responding to your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Your data will not be shared with third parties and will be deleted once the purpose of the communication has been fulfilled, unless statutory retention obligations apply.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You have the right to request confirmation of whether personal data concerning you is being processed and, if so, to obtain access to that data.
• Right to rectification (Art. 16 GDPR) — You have the right to request the correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR) — You have the right to request the deletion of your personal data, provided no legal obligation to retain the data exists.
• Right to restriction of processing (Art. 18 GDPR) — You have the right to request the restriction of processing of your personal data under certain conditions.
• Right to data portability (Art. 20 GDPR) — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR) — You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR (legitimate interest) for reasons arising from your particular situation.
• Right to lodge a complaint (Art. 77 GDPR) — You have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your place of residence, your workplace, or the location of the alleged infringement.

To exercise any of these rights, please contact me using the details provided in the Imprint.

Changes to This Privacy Policy

I reserve the right to update this privacy policy to reflect changes to the website or to comply with legal requirements. The current version is always available on this page.

Last updated: March 2026