Controller
The controller for data processing on this website is:
Raphael Mitas
Weiterstädter Str. 65
64291 Darmstadt
Germany
Email: mail@raphaelmitas.com
Phone: +49 15679 769941
What this site does not do
This is a personal portfolio. There are no user accounts, no contact form, no newsletter, no comments, no analytics, no tracking pixels and no advertising. Fonts, images and scripts are served from this site itself, so opening a page sends no request to any third party. Because of that, no consent banner is needed.
Hosting and server log files
This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Each time a page is requested, the hosting provider automatically records data that your browser transmits, in particular your IP address, the date and time of the request, the requested URL, the referrer URL, and your browser and operating system version.
This data is processed on the basis of Art. 6 (1)(f) GDPR. The legitimate interest is the secure, stable and traceable delivery of this website. The data is not merged with other sources and is deleted automatically after a short period.
Vercel processes this data as a processor on my behalf under Art. 28 GDPR. Processing takes place in part in the USA on the basis of standard contractual clauses. Details: vercel.com/legal/privacy-policy.
Content database
The content of this site (CV entries, projects, blog posts) is stored in a Postgres database operated by Neon Inc., 209 Orange St, Wilmington, DE 19801, USA, acting as a processor under Art. 28 GDPR. That database holds my own content, not visitor data. Details: neon.com/privacy-policy.
Cookies
This site sets one cookie, named locale, which stores nothing but the language you picked in the language switcher and expires after one year. It is strictly necessary to provide the service you requested within the meaning of § 25 (2) no. 2 TDDDG, so no consent is required. A further session cookie is set only in the administration area at /admin, which is used exclusively by me as the site operator.
Contacting me by email
If you write to me at the address given above, the data you send, including your email address and the content of your message, is stored so I can process your enquiry. The legal basis is Art. 6 (1)(f) GDPR, or Art. 6 (1)(b) GDPR where your message relates to a contract or to steps taken prior to entering into one. I keep the message until it is dealt with and no retention obligations stand in the way of deletion.
Your rights
You have the right to obtain information about the personal data stored about you (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), to data portability (Art. 20), and to object at any time to processing based on Art. 6 (1)(f) GDPR (Art. 21). To exercise any of these rights, an email to mail@raphaelmitas.com is enough.
You also have the right to lodge a complaint with a supervisory authority. The one responsible for me is:
Der Hessische Beauftragte für Datenschutz und die Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
https://datenschutz.hessen.de
Changes to this policy
I update this privacy policy when the site changes in a way that affects it. The current version always applies and is dated at the top of this page.