Privacy Policy

This privacy policy explains how personal data is processed when you visit this website, in line with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This site is a non-public design preview; it sets no tracking cookies and uses no advertising or profiling.

1. Controller

The controller responsible for data processing on this website is Julian Weis (private individual), reachable via LinkedIn. Full contact details are added before any public launch. Technical operation and build: Julian Weisel, julianweisel.de.

2. Hosting & server log files

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA, USA; with EU edge locations). When you access the site, Cloudflare automatically processes technically necessary connection data (server log files), in particular: anonymised/abbreviated IP address, date and time of the request, the requested resource, referrer URL, browser type and version, and operating system. This is required to deliver the site securely and to defend against attacks.

Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, stable and efficient provision of the website). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare; transfers to the USA are safeguarded by the EU Standard Contractual Clauses and Cloudflare's EU/US Data Privacy Framework certification.

3. Contact form

If you use the contact form, the data you enter (name, email address, message) is transmitted to a dedicated Cloudflare Worker and forwarded by email via the delivery provider Resend (Resend, Inc., USA) so that we can respond to your enquiry. Spam and bot protection is provided by Cloudflare Turnstile, a privacy-friendly, cookieless CAPTCHA alternative.

• Purpose: processing and answering your enquiry.
• Legal basis: Art. 6 (1)(b) GDPR (pre-contractual / contractual steps) and/or Art. 6 (1)(f) GDPR (legitimate interest in answering enquiries).
• Retention: your message is kept only as long as needed to handle your request and any follow-up, then deleted, unless statutory retention periods apply.

4. Fonts

Fonts (Space Grotesk, Manrope) are self-hosted and served from this site's own domain. No connection is made to Google Fonts or any external font CDN, so no data is shared with third parties for fonts.

5. Cookies & tracking

This website sets no tracking or marketing cookies. Only a local browser storage entry may be used for the preview access gate (technically necessary, not shared). If web analytics are enabled, they are provided by SimpleAnalytics in a cookieless mode without collecting personal data or building user profiles (Art. 6 (1)(f) GDPR).

6. Recipients & third countries

Personal data is processed by the service providers named above (Cloudflare, Resend). Where these involve processing in the USA, transfers are safeguarded by EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. No data is sold or used for advertising.

7. Your rights

Under the GDPR you have the right to:

• access to your personal data (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time with effect for the future (Art. 7 (3)), where processing is based on consent.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the data protection authority of your place of residence.

8. Data security

This site is served exclusively over encrypted HTTPS/TLS. Appropriate technical and organisational measures are in place to protect your data against unauthorised access, loss or manipulation.

9. Changes to this policy

This policy is updated whenever changes to our processing require it — in particular a full version with complete controller details is published before any public, commercial launch of the site.