Privacy policy

The controller within the meaning of Art. 4(7) GDPR is:

rkebinger@gmail.com

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you open a page, the server automatically records what your browser sends with the request: IP address, date and time, the page requested, the referring page, and browser and operating system (server log files).

This is necessary to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in a stable and secure website. The request logs available to me are deleted automatically after one day at most. The host keeps its own operational logs only as long as it needs them to run and secure its service; details are in its privacy policy.

The host processes this data on my behalf under a data processing agreement (Art. 28 GDPR). Where data is processed outside the EU/EEA, the transfer is based on the EU–US Data Privacy Framework (adequacy decision, Art. 45 GDPR), under which Vercel Inc. is certified.

This website sets no cookies. If you use the light/dark switch on the project pages, your choice is saved in your browser’s local storage under the key “page-theme”, so the pages open in that theme next time. It never leaves your device, and you can delete it at any time in your browser settings.

The legal basis is § 25(2) no. 2 TDDDG: the storage is strictly necessary to provide a function you explicitly asked for.

The fonts (Inter and IBM Plex Mono) are served from this website’s own server. No connection to Google or any other font provider is made.

If you email me, I process your address and your message only to answer you. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or its preparation, otherwise Art. 6(1)(f) GDPR — the legitimate interest in answering inquiries.

I delete the correspondence once it is no longer needed, unless statutory retention periods apply. The mailbox is provided by Google (Gmail), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA; Google LLC is certified under the EU–US Data Privacy Framework.

Email is not encrypted end to end, so it can be read or changed in transit. Please do not send confidential information that way.

This website links to GitHub, LinkedIn and Instagram. Nothing is loaded from them until you follow a link; from then on, the privacy policy of that service applies.

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible here is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

You do not have to provide any personal data to use this website beyond what your browser sends anyway. There is no automated decision-making or profiling.