Datenschutzerklärung
Privacy Policy
1. Data Controller
2. Scope
This policy informs you about the nature, scope, and purpose of the processing of personal data on this website (the “Service”), in accordance with the General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG). The Service is a static portfolio that does not require registration, collects no form input beyond what is described below, and does not profile visitors.
3. Server Log Files
When you visit this website, the hosting provider automatically collects and stores technical information that your browser transmits, including:
- IP address (shortened where possible)
- Browser type, version, and language
- Operating system
- Referrer URL
- Date and time of access
This data is processed on the legal basis of Art. 6 (1)(f) GDPR (legitimate interest in operating a stable and secure website). It is not merged with other data sources and is deleted after a short retention period set by the hosting provider.
4. Hosting (Vercel)
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes connection data including IP addresses to deliver the website. Data may be transferred to the USA; the transfer is safeguarded by Standard Contractual Clauses and by Vercel's adherence to the EU-U.S. Data Privacy Framework. Details: vercel.com/legal/privacy-policy.
5. Content Delivery (Sanity)
Editable content and images are stored in Sanity, provided by Sanity.io (Sanity AS, Rolfsbuktveien 4A, 1364 Fornebu, Norway). Images are retrieved from Sanity’s CDN (cdn.sanity.io) and routed through this site’s image-optimization layer before being served to your browser. Depending on the caching path, a direct connection to cdn.sanity.io may be established when an image is first requested; at that point Sanity can see your IP address and the requested image URL. Legal basis: Art. 6 (1)(f) GDPR. Details: sanity.io/legal/privacy.
The content editor (“Studio”) at /studio is an administrative tool reserved for the site owner. It is not intended for public visitors and is not accessed during normal page views.
6. Fonts & Assets
Typography (Inter) is self-hosted through Next.js, which downloads the font files at build time and serves them from this site’s origin. No requests are made to Google Fonts while you view the page.
Photographs and other static images are served either from this site’s own /public directory or from Sanity (see “Content Delivery” above), always via Next.js image optimization.
7. External Links & Embedded Media
Some project pages include a “trailer” link that points to a video hosted on a third-party platform (for example YouTube, Vimeo, or another provider). These trailers are plain links that open in a new tab — no video player is embedded in this site, so no data is sent to the video provider while you are browsing these pages. As soon as you follow such a link, the platform in question receives the usual request data (IP address, browser, referrer, and any cookies you already have for that platform) and its own privacy policy applies.
YouTube: policies.google.com/privacy · Vimeo: vimeo.com/privacy. Other platforms are governed by the privacy statements published on their respective websites.
Should a future version of this site ever embed a video player directly in a page (rather than linking out), the provider in question will be added to this policy and, where required, an opt-in cookie/consent banner will be shown before the player is loaded.
8. Cookies & Tracking
This website does not use tracking cookies, analytics, advertising, tag managers, social-plugins, or fingerprinting. Only strictly necessary technical cookies may be set by the hosting infrastructure. A short-lived cookie may additionally be set when the site owner previews unpublished content from the Studio; that cookie is cleared when preview mode is disabled. No consent banner is required because no non-essential processing takes place.
9. Contact by Email
If you contact me by email, the information you send (email address, message content, any attachments) is processed solely for the purpose of answering your request (Art. 6 (1)(b) and (f) GDPR). Correspondence is stored for as long as it is needed for that purpose and then deleted, unless statutory retention duties apply.
10. Your Rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent at any time with effect for the future (Art. 7 (3))
You also have the right to lodge a complaint with a supervisory authority. The competent authority in Baden-Württemberg is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (baden-wuerttemberg.datenschutz.de).
11. Contact
For any questions regarding data protection on this site, please contact website@studiohippo.de.
12. Changes
This privacy policy may be updated to reflect changes in the website or in legal requirements. The current version applies to your visit.