Privacy policy

Website operator and data controller

Hosting and technical request data

Cloudflare provides hosting and delivery. When you request a page or file, technical data such as your IP address, requested URL, time, browser information, referrer when supplied, and connection/security information are processed to deliver the content and protect availability. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, operates a global network. The legal basis for necessary delivery and proportionate security is Article 6(1)(f) GDPR: the legitimate interest in operating a reliable, secure professional website. GitHub stores the source code and supports deployment. It is not the runtime host, and visiting this website does not load GitHub widgets. The website itself maintains no visitor database or persistent request-log system.

Language, appearance and cookies

Explicit /en, /de and /hu addresses always determine the language. At the root address, a saved choice takes priority; otherwise Cloudflare’s request country and the browser language select the initial language, with English as fallback. No external IP lookup is used, and the website does not store a country profile. When you choose a language or theme, the first-party cookies timar-locale and timar-theme remember that setting for up to one year. Their values are limited to en/de/hu and light/dark/system. They use SameSite=Lax and Secure on HTTPS. The default appearance is light; the optional system setting follows your device. You can delete the cookies in your browser or with “Reset saved preferences” in the Appearance menu. Neither localStorage nor sessionStorage is used by the website. These cookies provide the preference you expressly select. Device storage is based on § 25(2)(2) TDDDG; the related personal-data processing is based on Article 6(1)(f) GDPR, the interest in retaining the requested preference.

Email contact

If you email me, I process your email address, message and any details you choose to provide in order to reply and continue the conversation. General enquiries are processed under Article 6(1)(f) GDPR, based on the legitimate interest in responding; steps towards a contract requested by you are covered by Article 6(1)(b). Only include information relevant to your enquiry.

Links and locally hosted media

LinkedIn and the project websites are external links. Their own privacy policies apply after you follow a link. Portraits, project images, the TABUZZ animation and downloadable PDFs are served from this website. The PDF preview uses a document from the same domain. No external media player, social embed or third-party font service is needed to view the content.

Recipients and international processing

Recipients include Cloudflare and its relevant subprocessors for hosting and security, the email provider for correspondence and authorised administrators where required. Processing in Cloudflare’s global network can take place outside the European Economic Area. International transfers are subject to Chapter V GDPR. Cloudflare describes its data-processing terms, standard contractual clauses and other transfer safeguards in its Data Processing Addendum and privacy information linked below. The website does not make automated decisions about you or carry out profiling.

Storage duration

Preference cookies expire after at most one year unless renewed or deleted earlier. Correspondence is retained for handling the enquiry and any resulting professional communication; it is deleted when no longer required, unless a legal obligation requires further retention. For technical network and security data, the relevant criteria are the period needed for secure delivery, investigation of incidents and applicable legal obligations. The storage duration depends on the specific service and processing purpose.

Your rights

Subject to the legal conditions, you have rights of access (Article 15 GDPR), rectification (16), erasure (17), restriction (18) and data portability (20). You may object under Article 21 to processing based on legitimate interests for reasons relating to your particular situation. If processing is based on consent, you can withdraw it for the future. Use the controller’s email above to exercise your rights. Under Article 77 you may complain to a supervisory authority. Providing enquiry details is voluntary; technical request data is necessary to retrieve the website.

Supervisory authority

The relevant state authority for the operator in Baden-Württemberg is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI). Its contact and complaint channels are linked below. You may also contact another competent supervisory authority.