Privacy Policy

1. Consent settings (Local Storage)

When you make a choice in the consent dialog, I store that decision (whether you accepted or declined analytics cookies) in your browser’s local storage, only so you aren’t asked again on every visit. No personal data is transmitted to me in this step.

Legal basis: Art. 6(1)(c) GDPR (documenting consent) and Art. 6(1)(f) GDPR (legitimate interest in a functioning site). You can revoke your choice anytime via “Cookie settings” in the footer.

2. Web analytics (Google Analytics)

Only if you explicitly consent do I use Google Analytics to understand, in aggregate, how the site is used. Without your consent no analytics script is loaded (Consent Mode v2, denied by default). If you decline, measurement stays off.

Legal basis: Art. 6(1)(a) GDPR (consent). Revocable anytime via the cookie settings.

3. Contact requests and lead data

There is currently no active contact form on this site. Once one is enabled, the following applies to requests made through it: when you send a project request through the contact form, I will process the details you enter to answer your request and to start a possible project. Storage is planned with Supabase Inc., with servers located in Frankfurt, Germany (EU).

The data processed will then be the fields from the form, namely your name, your email address and your message or project details. Once the form is live, this policy will be updated with the technical fields actually stored (for example a hashed IP address for spam protection and your marketing-consent status).

Retention: request data is kept for up to 3 years from our last contact (initiation and handling of business transactions, § 257 HGB / § 147 AO). If no project results and no retention obligation applies, I delete it earlier on request.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and, where statutory retention applies, Art. 6(1)(c) GDPR.

Your data is not shared with third parties without your consent.

4. Email delivery (Resend)

Once the contact form is active, I use Resend (Resend Inc., USA) to send emails (confirmation of your request, replies). Resend is certified under the EU-US Data Privacy Framework and provides an adequate level of data protection.

Data transmitted: email address, name, message content.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in reliable email communication).

5. Your rights

You have the right at any time to:

• access your stored personal data (Art. 15 GDPR)
• rectify inaccurate data (Art. 16 GDPR)
• erase your data (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

To exercise your rights, write to me at info@maximilianjacob.de.

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about how your personal data is processed.