Privacy policy

1. Controller

Lena Goldmann
Email: lenagoldmann93@proton.me

2. Hosting by Netlify

The website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Whenever a page is requested, Netlify processes technically necessary data in server logs, in particular the IP address, time, requested address and details about the browser and operating system. This is needed to deliver the site and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure and stable operation of the website. I have concluded a data processing agreement with Netlify under Art. 28 GDPR.

Netlify also processes data in the USA. Netlify participates in the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR); in addition, Netlify uses the European Commission's Standard Contractual Clauses.

3. Access code and session cookie

My references are only visible with a personal access code. When you enter a valid code, the website sets a technically necessary cookie (nuxt-session). It is encrypted, cannot be read by scripts and only contains an internal identifier of the code used. It is valid for 7 days or until you leave the references via “Lock again”.

No consent is required for this cookie, as it is strictly necessary for the access you requested (Section 25(2) no. 2 TDDDG). The legal basis for the processing is Art. 6(1)(f) GDPR. No other cookies are set.

4. Access log of the references

I give each access code to a specific person or company and label it with their name. For each code, the website stores when it was entered and when the references page was opened. For wrongly entered codes, only the time is stored. IP addresses and browser details are not stored.

This lets me see whether and when my application documents were viewed, and detect misuse. The legal basis is Art. 6(1)(f) GDPR. The entries are stored with Netlify (see section 2) and deleted automatically after 12 months. If I delete a code, the entries made up to that point are kept.

5. Contact by email

If you email me, I process your details to answer your request (Art. 6(1)(b) or (f) GDPR). I delete them once they are no longer needed for this and no statutory retention obligations apply.

6. Links to other websites

The references link to websites I have built. Only when you click such a link does the other website open in a new tab; from then on, its own privacy policy applies.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Just send me an email.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for me, the Saxon Data Protection and Transparency Commissioner in Dresden.