Privacy

This English translation is provided for convenience. The German version is authoritative. Deutsch

This website presents a personal, non-commercial design project. The information and images are public; the private Atelier is accessible exclusively to the operator.

Controller and contact

Visiting the website

The website is provided through Vercel. The hosting infrastructure processes, in particular, IP addresses, timestamps, requested addresses and technical browser and connection data to deliver pages, detect errors and prevent attacks. Technical and security-related logs may contain IP addresses.

The basis for providing and protecting this website is the legitimate interest in secure, reliable operation (Article 6(1)(f) GDPR). I do not integrate analytics or marketing services, advertising pixels or external font services. The public home page does not request a private session or Atelier data.

Private access and login protection

Login is reserved for the operator. To protect against abusive login attempts, the application processes a pseudonymous identifier derived from the request origin, timestamps and counters. This login-protection data is stored in Neon. The identifier is not anonymous; hosting logs separate from the application may still contain IP addresses. The purpose and basis are protection of private access and the legitimate interest in system security (Article 6(1)(f) GDPR).

After successful login, the necessary signed session cookie “atelier_owner” is set. It enables private access, is valid for a maximum of eight hours and is removed on logout. It is not used for advertising or cross-site analysis.

Contact by email

If you voluntarily send an email, I process your email address, the information you provide and the message to respond and handle related follow-up questions. Email service providers are involved in transmission and storage. This website has no contact form. The basis is my legitimate interest in handling your enquiry (Article 6(1)(f) GDPR).

The private Atelier

The private design workflow processes the operator’s own input and the associated image and processing data. It is not available to visitors. Ordinary visits to the public pages trigger neither image generation nor a call to OpenAI.

Recipients, processing locations and retention

Technical recipients are Vercel for hosting and security processing, Neon for login protection and the service providers involved in an email you send. Providers operating internationally may also process data outside the European Union; processing exclusively in Germany or Europe is not guaranteed.

Retention is governed by the respective purpose, the handling of security incidents or enquiries and applicable legal obligations. Technical logs and backups may be subject to different retention rules of the providers. No single fixed deletion period is specified here for this data. The short login-protection time window does not promise immediate deletion of all associated data or backups.

Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may also lodge a complaint with a data protection supervisory authority. For questions or to exercise your rights, you can contact me at the email address given above.

Last updated: 7 October 2026