Privacy policy

What this website processes, why, and what you can ask me to do about it.

1. Controller

The controller within the meaning of the GDPR is:

Mateja Mihajlovic

The postal address is supplied on request by email.

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser transmits data that the host records in log files: IP address, date and time of the request, the page requested, referrer, browser and operating system version.

This processing is necessary to deliver the site, keep it stable and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR — my legitimate interest in a technically reliable website. The log data is not merged with other sources and is not used to identify you.

The host processes this data on my behalf under Art. 28 GDPR. Its privacy policy: https://vercel.com/legal/privacy-policy

3. Contact by email

If you write to me at the address above, I process the details you send in order to answer you. The legal basis is Art. 6 (1) (f) GDPR, and Art. 6 (1) (b) GDPR where your message concerns a possible employment relationship. I keep the correspondence for as long as it is needed for the matter it concerns, then delete it.

4. Contact form

The contact form asks for your name, email address, a subject and your message. Those fields are sent to my own endpoint on this domain, converted into an email and delivered to my inbox. Nothing is written to a database and this website keeps no copy of your message.

Delivery runs through Resend (Plus Five Five, Inc.), 2261 Market Street #5039, San Francisco, CA 94114, USA, acting as a processor on my behalf under Art. 28 GDPR. Its privacy policy: https://resend.com/legal/privacy-policy

If delivery is not available, the form opens your own email program with the message ready to send instead — in that case nothing reaches this website at all and your message travels only through your own email provider.

The form carries a hidden field that automated submissions tend to fill in. If it is filled in, the message is discarded and nothing is sent. No further profiling takes place and no data about you is stored for this check.

The legal basis is Art. 6 (1) (f) GDPR, and Art. 6 (1) (b) GDPR where your message concerns a possible employment relationship. Using the form is voluntary; you can always write to the email address above instead.

5. Cookies, tracking and fonts

This website sets no cookies. There is no web analytics, no advertising network, no tracking pixel, no social media plug-in and no embedded map or video.

Both typefaces are delivered from this domain. No request goes to Google Fonts or to any other external server when you open a page.

The theme and the profile view you choose are stored locally in your browser so the site remembers them on your next visit. That information stays on your device, is never transmitted to me, and is removed when you clear your browser storage. It is required to provide the display setting you asked for, so no consent banner is involved.

6. Transfers to third countries

The hosting provider and the email delivery provider are based in the USA and may process data there. Both are certified under the EU-US Data Privacy Framework, and transfers are additionally covered by the European Commission's standard contractual clauses. Despite these safeguards, US authorities may in principle be able to access such data.

7. Your rights

Under the GDPR you have the right to:

access the personal data I hold about you (Art. 15)
have inaccurate data corrected (Art. 16)
have your data erased (Art. 17)
have processing restricted (Art. 18)
receive your data in a portable format (Art. 20)
object to processing based on legitimate interests (Art. 21)
lodge a complaint with a supervisory authority (Art. 77) — for Hamburg, the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

8. Changes to this policy

I update this policy whenever the website changes in a way that affects it — for example if a new service is added. The version published here is always the current one.