merlin
ENDE

Privacy notice

Merlin Schmidt
me@mschmidt.dev

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. To deliver pages and protect the service, Vercel processes technical request data such as your IP address, requested URL, request time, browser information, referring page where transmitted, and response or diagnostic data.

The purpose is reliable delivery, troubleshooting and protection against abuse. The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in operating a secure website. Retention depends on the log type, operational and security needs, and legal obligations; Vercel describes its retention criteria in its privacy notice.

Processing can take place in the United States and other countries. Vercel lists its subprocessors and describes international-transfer safeguards, including Standard Contractual Clauses for applicable transfers, in its published data processing addendum. Information about these safeguards can also be requested using the contact details above.

The link to me@mschmidt.dev opens your email application. If you send a message, your email address, message and any details you include are processed to respond to you. Recipients are the operator and the technical email service providers used to deliver and handle correspondence.

The legal basis is Article 6(1)(b) GDPR for enquiries about a contract or pre-contractual steps you request, and Article 6(1)(f) GDPR for other correspondence, based on the legitimate interest in answering enquiries. Messages are retained while needed to handle the enquiry or meet applicable legal retention obligations, then deleted.

The application sets no cookies and does not use persistent localStorage. The gallery selects four photos on each load without saving a visitor identifier or catalog position.

When you request a language switch, sessionStorage temporarily holds the destination path, section, scroll position and timestamp under "merlin.language.scroll". This is used only to preserve your position for that requested action (§25(2)(2) TDDDG). Where personal data is involved, Article 6(1)(f) GDPR applies, based on the legitimate interest in providing the language-switch function.

The record is read and removed on the next page initialisation, or cleared when the tab session ends. Records older than 15 seconds are ignored. You can clear site data or block browser storage; the language switch then uses a section anchor instead.

Fonts and images are served with the site. The application contains no analytics, advertising pixels, social-media embeds or contact form. GitHub and LinkedIn are ordinary links. Following one sends you to that provider, whose privacy notice applies to the resulting visit.

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. Where processing relies on consent, you may withdraw it at any time with effect for the future.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation under Article 21 GDPR. Contact the controller above to exercise your rights.

You may complain to a data-protection supervisory authority under Article 77 GDPR, particularly in the Member State of your habitual residence, workplace or the alleged infringement.

Technical request data is necessary to deliver the site. Email contact is voluntary, but an enquiry may not be answerable without the necessary contact details. The operator does not use these data for profiling or automated decisions with legal or similarly significant effects.