Privacy Policy

Portfolio website of Chris Leon Noltemeier · Last updated: July 2026

1. Data controller

The data controller for this website is:

Chris Leon Noltemeier
Bad Essen, Germany
Email: chris.noltemeier@gmail.com

TODO: Complete the postal address (street, number, ZIP) and have it legally reviewed.

2. Scope

This privacy policy applies to the portfolio website available under this domain (professional profile, projects, and contact form). It does not automatically cover separate third-party products or other domains (e.g. linked project sites) that publish their own notices.

3. Hosting

This website is hosted by:

  • Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
  • Purpose: Providing and delivering the website
  • Data processed: e.g. IP address, access time, requested URL, user agent and similar server log data (as processed by the host)
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, efficient operation) – TODO: confirm legal basis and DPA/SCC with the operator
  • Retention: TODO: confirm current Vercel log retention
  • Recipients / third country: Vercel; possible transfers to the USA – TODO: review transfer mechanism

Provider privacy notice: https://vercel.com/legal/privacy-policy

4. Technologies used (consent and necessary functions)

The following technologies are actually used in this project. Optional services are loaded only after your consent. You can change your choice anytime via “Privacy settings” in the footer.

4.1 Language preference (necessary)

  • Provider: First-party (this website)
  • Purpose: Store the selected language (German/English)
  • Data / mechanism: localStorage key preferred_locale
  • Legal basis: Art. 6(1)(f) GDPR and Section 25(2) TDDDG (technically required for the presentation requested by the user) – TODO: confirm legally
  • Retention: until deleted by the user or browser storage is cleared
  • Recipients: no third-party transfer via this storage

4.2 Consent storage (necessary)

  • Provider: First-party (this website)
  • Purpose: Store your consent decision (version, timestamp, categories)
  • Data / mechanism: first-party cookie portfolio_consent (no IP address, no full user agent)
  • Legal basis: Art. 6(1)(c)/(f) GDPR and Section 25(2) TDDDG – TODO: confirm legally
  • Retention: 12 months
  • Withdrawal: via “Privacy settings”; the banner may reappear when required

4.3 Vercel Web Analytics (optional – statistics)

  • Provider: Vercel Inc. (see section 3)
  • Purpose: Reach and usage statistics (e.g. page views)
  • Data processed: technical usage information (e.g. paths); see Vercel’s notices – TODO: confirm data categories against current Vercel docs
  • Legal basis: consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG
  • Storage / loading: script loaded only after consent (/_vercel/insights/script.js in production)
  • Retention: TODO: document Vercel retention
  • Recipients / third country: Vercel; possible USA transfers – TODO: review
  • Withdrawal: anytime via “Privacy settings” (disable Statistics)

5. Contact form

If you use the contact form, the data you enter (name, email, optional phone number, message, plus technical spam protection / rate-limiting data on the server) is processed to respond to your request.

  • Provider (email delivery): Resend (if configured) and/or Formspree as fallback
  • Purpose: handling your inquiry
  • Legal basis: Art. 6(1)(b) GDPR (pre-contractual / inquiry-related communication) or (f) – TODO: confirm basis and processing agreements
  • Retention: TODO: define how long inquiries/emails are kept
  • Note: form data is not stored in the consent cookie or persistently in the browser

6. External links

This website links to external services (e.g. GitHub, LinkedIn). Clicking those links leaves this site; the providers’ own privacy notices apply. No social plugins or marketing pixels from those providers are embedded on this website.

7. Fonts

Fonts are not loaded from Google Fonts or other third-party font CDNs. Rendering uses locally available / system fonts via the CSS font stack.

8. Your rights

Under applicable law you may have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object (Art. 21 GDPR)
  • Withdraw consent (Art. 7(3) GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

9. Changes

This privacy policy may be updated when features, services or the legal framework change. The current version is published on this page.

10. Contact

Chris Leon Noltemeier
Bad Essen, Germany
Email: chris.noltemeier@gmail.com