Privacy Policy.
This Privacy Policy explains how your personal data is handled when you visit this website, submit messages via the contact form, or interact with our content, in full accordance with the European Union General Data Protection Regulation (GDPR) and the ePrivacy Directive.
Zero Tracking Cookies
No Google Analytics, no Facebook pixels, no profiling. We respect your digital privacy.
No Third-Party Font CDNs
Fonts are served locally to prevent remote IP harvesting (LG München I 2022 compliance).
Full Subject Rights
Complete rights under Articles 15–22 GDPR: access, erasure, rectification, objection.
01. Data Controller Identification
Under Article 4(7) of the General Data Protection Regulation (GDPR), the data controller responsible for the processing of personal data on this website is:
Norbert Brettschneider
Full-Stack Engineer & AI Specialist
Budapest, Hungary
Email: norbertbrett@outlook.com
02. Categories of Data & Legal Bases for Processing
We process personal data solely in compliance with relevant data protection regulations, specifically Article 6(1) of the GDPR. We collect only the minimum data required to provide a functional, secure, and responsive web experience:
A. Server Log Data & Technical Delivery
When accessing this website, the hosting infrastructure (Vercel Inc.) automatically records connection metadata necessary to deliver the web pages securely and prevent malicious traffic:
- IP address of the requesting terminal device
- Date and timestamp of request
- Requested resource path and HTTP status code
- Browser type, version, and operating system
- Referrer URL (if transmitted)
Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest). Our legitimate interest is the stable, error-free, and secure operation and defense of the web service.
B. Contact Form Inquiries
If you submit an inquiry through our contact form, we collect:
- Your name
- Your email address
- The content of your message
Legal Basis: Art. 6(1)(b) GDPR (Performance of a contract or steps prior to entering into a contract) if your inquiry concerns professional collaboration or hiring; or Art. 6(1)(f) GDPR (Legitimate Interest) to respond effectively to general inquiries.
03. Cookie Policy & Local Storage
In accordance with the ePrivacy Directive (Directive 2002/58/EC as amended by Directive 2009/136/EC) and the European Data Protection Board (EDPB) Guidelines 2/2023:
This website does not set any tracking cookies, marketing cookies, third-party analytical cookies, or browser fingerprinting scripts. We store strictly necessary technical values inside your browser's local/session storage:
theme(localStorage): Remembers whether you selected dark mode or light mode.preloaderPlayed(sessionStorage): Prevents the cinematic loading screen from repeating during consecutive page views in a single session.
Because these storage operations are strictly necessary to deliver user-demanded interface preferences (ePrivacy Directive Article 5(3) exemption), no intrusive cookie banner is required under EU jurisprudence.
04. Data Processors & Third-Party Infrastructure
To maintain high reliability, security, and global delivery, we partner with data processors operating under strict data processing agreements (Article 28 GDPR):
Vercel Inc. (Hosting & Edge CDN)
Provides serverless infrastructure and static hosting. Processing takes place subject to the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs).
Web3Forms (Form Transit)
Acts as a secure encrypted relay for messages submitted through our contact form directly to the controller's email address. Form data is not sold or monetized.
Cloudinary (Media CDN)
Serves optimized image assets and video previews. Only standard technical request headers are processed to deliver media efficiently.
05. Storage Duration & Erasure
Personal data provided through contact inquiries is retained only for the duration necessary to address your communication, complete any ensuing professional contract negotiations, or meet statutory commercial retention periods under European civil law. Server access logs are automatically rotated and purged according to cloud industry standards (typically within 30 days).
06. Your Rights as a Data Subject (Articles 15–22 GDPR)
As an individual in the European Union or European Economic Area, you possess comprehensive statutory rights regarding your personal data:
To exercise any of these rights, please email us directly at norbertbrett@outlook.com. Requests are addressed promptly within statutory deadlines (one month) without charge.
07. Right to Lodge a Complaint (Art. 77 GDPR)
If you believe the processing of your personal data infringes the GDPR, you have the statutory right to lodge a complaint with an EU supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.
Competent Supervisory Authority in Hungary:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Falk Miksa utca 9-11, 1055 Budapest, Hungary
Phone: +36 1 391 1400 · Email: ugyfelszolgalat@naih.hu
08. Technical & Operational Security (Art. 32 GDPR)
This website employs modern TLS encryption (HTTPS) to safeguard data in transit against interception and tampering. All systems and software components are systematically maintained and audited to prevent unauthorized access or disclosure.