Data Privacy

1. Introduction

This website is operated by Alexander Otto.

The protection of personal data is important. This Privacy Policy explains what personal data may be processed when you visit this website, why it is processed, which services are used and which rights you have under applicable data protection law.

Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, such as collection, storage, transmission, use or deletion.

2. Privacy-Friendly Website Setup

This website does not use Google Analytics, Meta Pixel, LinkedIn Insight Tag or comparable marketing tracking tools.

This website does not use marketing cookies, advertising cookies or tracking cookies to identify individual visitors or track users across different websites.

This website uses Cloudflare Web Analytics to understand aggregated website usage and performance. According to Cloudflare, Cloudflare Web Analytics does not use cookies, localStorage or similar client-side identifiers and does not fingerprint individual visitors.

Fonts are hosted locally. No external font provider such as Adobe Fonts, Google Fonts or Typekit is contacted for the delivery of the fonts.

Because this website does not use non-essential cookies, marketing cookies or tracking cookies, no cookie consent banner is displayed.

3. Controller Responsible for Data Processing

4. Data Protection Officer

5. Applicable Laws and Legal Bases

The relevant data protection regulations include the GDPR as a European regulation, the BDSG as a German national law and the TDDDG insofar as cookies or similar technologies are concerned.

Depending on the individual processing activity, personal data may be processed on the following legal bases:

Art. 6 para. 1 lit. a GDPR, where consent has been given.
Art. 6 para. 1 lit. b GDPR, where processing is necessary for pre-contractual measures or the performance of a contract.
Art. 6 para. 1 lit. c GDPR, where processing is necessary to comply with a legal obligation.
Art. 6 para. 1 lit. f GDPR, where processing is necessary to protect legitimate interests, provided that the interests, rights and freedoms of the data subject do not override those interests.

Where cookies or similar technologies are used, Section 25 TDDDG may also apply.

6. General Data Processing on This Website

Some data is collected automatically when you visit this website. This includes technical data that is required for the secure and functional provision of the website, such as server log data.

Other data is provided voluntarily, for example if you contact me by email.

Personal data is only transferred where there is a legal basis and where the transfer is necessary, for example to hosting providers, analytics providers or technical infrastructure providers.

Where required, data processing agreements are concluded with service providers in accordance with Art. 28 GDPR.

Personal data is deleted when the purpose and legal basis for processing no longer apply and there are no legal retention obligations or technical constraints preventing deletion.

7. Data Collection When Accessing the Website

When you visit this website, technical information may automatically be stored in server log files by the hosting provider and technical infrastructure providers.

This may include:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing device
Time of the server request
IP address
Requested files and pages
Amount of data transferred
Access status or HTTP status code

This data is temporarily required in order to display the website correctly and securely. In particular, this data is used for:
‍
System security
System stability
Troubleshooting
Establishing a connection to the website
Presentation of the website
Protection against misuse and technical attacks

The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the secure, stable and functional operation of this website.

Where possible, this data is stored in pseudonymized form and deleted once the respective purpose has been achieved. Longer storage may occur if a security-relevant event must be investigated.

8. Cookies and Similar Technologies

This website does not use marketing cookies, advertising cookies or tracking cookies.Technically necessary cookies or comparable technologies may be used where they are required for displaying the website, providing website functions, ensuring security, delivering content or maintaining the technical operation of the website.

The use of technically necessary cookies or comparable technologies is based on Section 25 para. 2 TDDDG, insofar as they are strictly necessary to provide the digital service expressly requested by the user.

Any related processing of personal data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the secure, stable and functional operation of this website.

Because this website does not use non-essential cookies, marketing cookies or tracking cookies, no cookie consent banner is displayed.

If non-essential cookies, analytics tools that require consent, marketing tools or comparable technologies are used in the future, this Privacy Policy will be updated accordingly and, where legally required, consent will be obtained before such tools are activated.

9. Contact by Email

If you contact me by email, your email address and any other data contained in the email will be processed for the purpose of handling your request.

This data may be stored on mail servers and on the respective end devices used to process the request.

Depending on the nature of your request, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR if your request is related to pre-contractual measures or the performance of a contract. In all other cases, the processing is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in effectively responding to inquiries.

The data will be deleted as soon as the respective purpose no longer applies and deletion is possible in accordance with legal requirements. Mandatory statutory retention obligations remain unaffected.

10. Hosting and Website Construction System

This website is created and hosted using Webflow.

Provider:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA

Webflow enables the design, development, provision and hosting of this website, including functions for content management, responsive design and technical website delivery.

When using Webflow, technical data may be processed. This may include IP addresses, server log files, technical browser and device information, requested pages and files, and technically necessary cookies or comparable technologies required for the operation and security of the website.

The data is processed for the purpose of providing and securing the website, managing content, ensuring technical functionality and delivering a reliable user experience.

The legal basis is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in a modern, secure and technically reliable presentation of this online offer.

Where consent has been requested for specific processing activities, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG, where applicable.

The transfer of personal data to the USA cannot be ruled out when using Webflow. Where required, such transfer may take place on the basis of the EU Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR or other applicable legal transfer mechanisms.

Personal data will be deleted as soon as it is no longer required for the purposes for which it was collected, unless statutory retention obligations prevent deletion.

Further information can be found at:
https://webflow.com/legal/privacy

11. Analytics and Performance Measurement

This website uses Cloudflare Web Analytics, a privacy-focused analytics service provided by Cloudflare.

Provider:
Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA

Cloudflare may also provide services through affiliated entities in the European Union.

Cloudflare Web Analytics is used to understand aggregated website usage and performance. It enables the analysis of website statistics such as page views, visited URLs, referrers, countries or regions, device types, browser types, operating systems, performance data and status codes.

According to Cloudflare, Cloudflare Web Analytics does not use cookies, localStorage or similar client-side identifiers. Cloudflare also states that Cloudflare Web Analytics does not fingerprint individual visitors and does not track visitors across different websites.Cloudflare Web Analytics is used on this website only for aggregated usage and performance analysis. It is not used for advertising, retargeting or individual visitor profiling.

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in understanding website performance and usage in a privacy-friendly way, improving the website and ensuring a stable and reliable user experience.

Because Cloudflare Web Analytics does not use cookies, localStorage or similar client-side identifiers for analytics purposes and is not used for individual tracking, no cookie consent banner is displayed for this service.

If data is transferred to the USA, appropriate data protection safeguards, such as the EU Standard Contractual Clauses or other applicable legal transfer mechanisms, may apply.

Further information can be found at:
https://www.cloudflare.com/trust-hub/gdpr/

12. Content Delivery Network

This website may use bunny.net as a content delivery network (CDN) and technical infrastructure service.

Provider:
BunnyWay d.o.o.
Cesta komandanta Staneta 4A
1215 Medvode
Slovenia

A CDN helps deliver website content such as images, scripts, stylesheets, font files, videos and other static or dynamic content quickly, securely and reliably through a distributed network of servers.

When using bunny.net, technical data may be processed. This may include IP addresses, request and access logs, HTTP method, requested URL, hostname, time of access, response status, user agent, device and browser headers, geolocation and routing data, SSL/TLS metadata and other technical request data.

This information is processed to ensure the secure and high-performance delivery of website content, to optimize loading times, to defend against attacks, including DDoS attacks, to prevent misuse and fraud and to diagnose technical errors.The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the secure, efficient and reliable provision of this website.

To the extent that bunny.net is used only for technical content delivery, security and performance purposes, this processing is considered part of the technical operation of the website. No marketing tracking or advertising profiling is carried out through bunny.net on this website.

Whether bunny.net uses cookies or comparable technologies in a specific case depends on the respective technical integration and configuration. This website does not intentionally use bunny.net for non-essential tracking or marketing purposes.

Data will be deleted as soon as it is no longer required to achieve the stated purpose, provided that there are no legal retention obligations or technical constraints preventing deletion.

Further information can be found at:
https://bunny.net/tos/

13. Fonts

14. External Links and Third-Party Content

This website may contain links to external websites. If you click on an external link, you leave this website.

Simply visiting this website does not establish a connection to the servers of external providers linked on this website. Such connections are only established when you actively click on an external link.

The respective operators of the linked websites are responsible for the processing of personal data on those websites. Please refer to the privacy policies of the respective external websites.

This website does not currently embed external social media feeds, YouTube videos, Vimeo videos, Google Maps, Calendly widgets or comparable third-party content that would automatically transmit data to those providers when the website is accessed, unless expressly stated otherwise in this Privacy Policy.

15. Portfolio Content, Clients and Third-Party Rights

This website presents selected professional work, case studies and creative projects.

Where client names, trademarks, logos, campaign materials, screenshots, images or other third-party materials are shown, these remain the property of their respective rights holders.

The presentation of such work is for portfolio, editorial and professional self-presentation purposes only.

No endorsement, partnership or direct contractual relationship with the respective brands is implied unless explicitly stated.

No personal data of clients, collaborators or other individuals is intentionally published unless such information is already publicly available, professionally relevant or used with permission.

If you believe that any content on this website infringes rights or contains personal data that should not be displayed, please contact me so that the matter can be reviewed.

16. Your Rights

As a data subject, you have the following rights under the GDPR, provided that the respective legal requirements are met:

The right to obtain information about whether and how your personal data is processed, in accordance with Art. 15 GDPR.

The right to request the correction of inaccurate personal data and the completion of incomplete personal data, in accordance with Art. 16 GDPR.The right to request the deletion of your personal data, in accordance with Art. 17 GDPR.

The right to request the restriction of processing, in accordance with Art. 18 GDPR.

The right to receive personal data that you have provided in a commonly used, machine-readable format and to transfer it to another controller, in accordance with Art. 20 GDPR.

The right to object to the processing of your personal data on grounds relating to your particular situation, where the processing is based on Art. 6 para. 1 lit. e or Art. 6 para. 1 lit. f GDPR, in accordance with Art. 21 GDPR.

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, in accordance with Art. 22 GDPR.

This website does not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

If processing is based on your consent, you have the right to withdraw this consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

You also have the right to lodge a complaint with a competent data protection supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. You may contact a supervisory authority in the member state of your habitual residence, your place of work or the place of the alleged infringement.

17. Updates to This Privacy Policy