Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Eric Gerl
Ingeborg-Bachmann-Straße 17
40595 Düsseldorf, Germany
Email: eric@gerl.dev

2. Overview of Data Processing

This is a personal portfolio and blog website. It does not use analytics, tracking pixels, advertising cookies, or third-party scripts that collect personal data. The site is designed to be as privacy-friendly as possible.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access this website, Vercel automatically collects and stores information in server log files that your browser transmits, including:

• IP address (anonymized/truncated)
• Date and time of the request
• Requested URL / page
• HTTP status code
• Amount of data transferred
• Browser type and version
• Operating system
• Referring URL

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in ensuring the secure and efficient provision of this website.

Data processing agreement: Vercel processes data on my behalf under a Data Processing Agreement (DPA). Vercel's edge network may route requests through servers in various countries. For transfers to the US, Vercel relies on EU Standard Contractual Clauses (SCCs).

Retention: Server logs are automatically deleted by Vercel after 30 days.

4. Cookies & Local Storage

This website does not use cookies. It uses browser localStorage for two strictly necessary purposes:

Both items are classified as strictly necessary under TTDSG §25 and do not require consent. No data is transmitted to any third party from these storage items.

For full details, see the Cookie & Storage Policy.

5. Analytics & Tracking

This website does not currently use any analytics, tracking, or advertising tools. If analytics are added in the future, this policy will be updated and your consent will be requested before any non-essential data processing begins.

6. External Links

This website contains links to external services (e.g., GitHub, LinkedIn). When you click these links, you leave this site and are subject to the privacy policies of those third-party services. No data is shared with these services until you actively follow a link.

7. Your Rights under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — obtain confirmation of whether personal data is being processed and request a copy
• Right to rectification (Art. 16 GDPR) — request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) — request deletion of personal data
• Right to restriction of processing (Art. 18 GDPR) — request restriction under certain conditions
• Right to data portability (Art. 20 GDPR) — receive personal data in a structured format
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3) GDPR) — withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact me at eric@gerl.dev.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf, Germany
Website: www.ldi.nrw.de

9. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in the services offered on this website or changes in legal requirements. The current version is always available at /legal/privacy.