Privacy Policy

This website is hosted on the platform of Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel is certified under the EU-U.S. Data Privacy Framework.

When the site is accessed, technically necessary information is recorded in server log files:

• IP address of the requesting device
• Date and time of the request
• Requested URL and HTTP status code
• User-Agent (browser identifier)
• Referrer URL (previous page, if transmitted)

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). This data is not combined with other data sources. Log files are deleted or anonymised after a short retention period.

This website sets no cookies and uses no analytics or tracking tools. Specifically, none of the following are in use:

• Google Analytics, Plausible, Matomo, or comparable web-analytics services
• Advertising cookies, retargeting, or conversion tracking
• Social-media pixels (Facebook, LinkedIn, X)
• Heatmap or session-recording tools

Web fonts are self-hosted via the @nuxt/fonts module. No connection is made to Google Fonts or any other third-party font CDN.

For this reason this site deliberately does not show a cookie banner: there are no consent-requiring operations under § 25 TDDDG.

This site offers an optional chat assistant that answers questions about the controller's CV. Use is voluntary; without input nothing is processed.

When you send a message the following data is processed:

• The content of your message and the prior conversation (up to the last ten turns)
• The active site locale (de or en)
• Your IP address, to apply a request limit (10 messages per hour, held in memory)

To generate the response the message is sent together with the public CV text to a processor:

• OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a low-friction information offer about the controller's profile). The conversation is not stored server-side: neither inputs nor responses are written to a database, log, or cookie. Once you close the browser tab the history is gone.

You have the right to object to this processing at any time (Art. 21 GDPR). Email contact via the imprint address remains available regardless.

If you reach out via the email address listed in the imprint, your details (email address, name if provided, content of the message) will be processed to handle your enquiry and any follow-up. Legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding).

Your enquiry is not shared with third parties. Your data is deleted once handling is complete and no statutory retention obligation applies.

This site links to external services. When you follow an external link you leave this site and reach a third-party website whose data processing is outside my control:

• LinkedIn (LinkedIn Ireland Unlimited Company): linkedin.com/legal/privacy-policy
• EXIST programme (German Federal Ministry for Economic Affairs and Energy): exist.de/en/datenschutz

No content from these providers is embedded (no iframe, no widget, no tracking pixel). Data is only transmitted once you actively click a link.

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7 (3) GDPR)

An informal email to the address in the imprint is sufficient to exercise these rights.

You have the right to lodge a complaint with a data-protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

The competent authority for Cologne is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf
www.ldi.nrw.de