Before publication, confirm the legal operator, business address, jurisdiction, actual hosting and data practices, and effective date. This text is a starting draft, not legal advice.
1. Scope and contact
This draft describes the paulhartmann.dev portfolio website. It does not govern separate products such as TuGPT, Kuikchat, CoderXP, GetWink, Orba Agent, or The Infected. Those services require their own notices. For a privacy enquiry, contact [email protected]. The legal operator and address must be confirmed before this policy takes effect.
2. Information you choose to share
This design does not provide account registration, checkout, or a contact form. If you use an email link, your email provider sends your message through its service. Your name, email address, message, and any attachments may then be processed to respond to you and discuss your enquiry. Do not send passwords, payment details, or other unnecessary sensitive information.
3. Technical information and hosting
When this site is hosted, the hosting provider may process connection and server-log information, including IP address, request time, browser information, requested resource, and security events. The intended hosting is IONOS; the final hosting entity, server location, log settings, and retention periods must be confirmed before launch.
4. Cookies, tracking, and local media
This delivered design does not add analytics, advertising trackers, non-essential cookies, or browser-storage tracking. Images, scripts, and video are included as local files rather than remote social embeds. No consent banner is added merely for decoration. Reassess consent and disclosure requirements before adding analytics, embedded services, or other tracking technology.
5. Why information may be processed
Depending on the final operation and applicable law, processing may be necessary to respond to a request, take steps toward an agreement, deliver an agreed service, meet legal obligations, or protect the website from abuse. Where GDPR applies, identify the actual Article 6 basis for each processing purpose before publication; do not rely on this draft as a completed record of processing.
6. Providers, recipients, and transfers
Hosting and email providers may process information to operate the website and correspondence. Links to GitHub and social media are ordinary external links, not embedded feeds; visiting them is subject to the destination’s own practices. Confirm any international transfers, recipient details, and applicable safeguards based on the providers actually used.
7. Retention and security
Personal information should be kept only as long as needed for the purpose for which it was collected, contractual or legal duties, and legitimate security needs. Final retention periods and deletion procedures must be documented before launch. Reasonable technical and organizational safeguards should be maintained; no internet transmission can be guaranteed completely secure.
8. Your rights
Depending on your location and applicable law, you may have rights to access, correct, erase, restrict, or object to processing, obtain data portability, or withdraw consent where processing depends on consent. You may also have a right to complain to a competent data protection authority. Send requests to [email protected]; reasonable identity verification may be required.
9. Children and third-party products
This portfolio is intended to describe professional work and services, not to collect information from children. If you believe a child has sent personal information, contact the address above. Any age limits, product-specific processing, or special safeguards for linked services must be set out in those services’ own policies.
10. Changes and publication checklist
Update this policy when the site’s operation changes. Before making it effective, add the verified operator and service address, effective date, provider and transfer details, final purposes and legal bases, and retention information. Confirm that the published text accurately reflects the deployed site.