Privacy Policy

1. Controller

Abhinav Prakash, Landgraf-Philipps-Anlage 60, 64283 Darmstadt, Germany. Email: contact@abhinav-prakash.de.

A data protection officer is not legally required for this website: it is operated by a single individual and does not involve large-scale or special-category processing.

2. Hosting & server logs

This website is hosted by Vercel Inc. (USA). When you visit, Vercel automatically processes technical data such as your IP address, browser and request metadata to deliver the site and keep it secure.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure site). Data may be transferred to the USA; this transfer is safeguarded by Vercel’s certification under the EU-US Data Privacy Framework and, additionally, by the EU Standard Contractual Clauses (Art. 46 GDPR).

3. Contact form

If you use the contact form, your name, email address and message are processed and delivered to me by email (via Strato AG, Germany) so I can respond. An automated acknowledgement email is also sent to the address you provide. Providing this data is voluntary but required to send a message.

To prevent automated abuse, submissions are rate-limited per IP address, which may be logged briefly for that purpose.

Legal basis: Art. 6(1)(b) and (f) GDPR. Your message is deleted once your enquiry has been dealt with — at the latest six months after the last contact — unless the conversation is still ongoing. As this site is operated privately, no statutory commercial retention periods apply.

4. Spam protection (Cloudflare Turnstile)

To protect the contact form from automated abuse, it uses Cloudflare Turnstile (Cloudflare, Inc., USA), which processes your IP address and technical signals to tell humans from bots. It does not use tracking cookies.

Legal basis: Art. 6(1)(f) GDPR (security). Data may be transferred to the USA; this transfer is safeguarded by Cloudflare’s certification under the EU-US Data Privacy Framework and, additionally, by the EU Standard Contractual Clauses (Art. 46 GDPR).

5. Error monitoring (Sentry)

To detect and fix technical errors, this site uses Sentry (Functional Software, Inc.), with processing in the EU (Frankfurt). It receives technical error data such as the stack trace, the affected route, and browser/runtime metadata. It does not receive your IP address or other personal data (PII collection is disabled), and error events are routed through this website’s own domain.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable, secure website). Data may be processed within the EU.

6. Cookies & local storage

With your consent (via the banner), a single functional cookie ("site-language", valid one year) stores your chosen language. It is sent to the server on each request so the site can render in the right language. It is not used to track you.

A separate cookie ("language-consent", valid one year) records your choice on the consent banner so you are not asked again.

For performance, your browser also caches the page content and your language preference in local storage (localStorage). This is functional only, contains no personal data, and is not sent to a server.

You can withdraw your consent at any time, with effect for the future and as easily as you gave it — using the button below, or the “Cookie settings” link in the footer: it removes the stored preference and reopens the banner. Withdrawal does not affect the lawfulness of any processing carried out beforehand.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Where processing is based on your consent, you also have the right to withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). To exercise any of these, email me at contact@abhinav-prakash.de.

You also have the right to lodge a complaint with a supervisory authority, for Hesse: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit.

8. Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR, and no profiling, takes place on this website.