Privacy Policy

Seung Hwan Lee

I7 7 68159 Mannheim, Germany

Email:work@seungdance.com

This policy informs you about the nature, scope, and purpose of the processing of personal data on this website (the “Service”), in accordance with the General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG). The Service is a portfolio website that does not require registration, collects no form input beyond what is described below, and does not build profiles of visitors across days (see section 5).

When you visit this website, the hosting provider automatically collects and stores technical information that your browser transmits, including:

• IP address
• date and time of access
• requested address (URL) and response status code
• referrer URL (the previously visited page), if your browser sends it
• browser type, browser version and operating system (user agent)

This data is processed on the legal basis of Art. 6 (1)(f) GDPR (legitimate interest in operating a stable and secure website). It is not merged with other data sources. How long Vercel stores the log files is determined by Vercel (see section 4).

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes connection data including IP addresses to deliver the website. Data may be transferred to the USA; the transfer is safeguarded by Standard Contractual Clauses and by Vercel's adherence to the EU-U.S. Data Privacy Framework. Details: vercel.com/legal/privacy-policy.

Insofar as usage data and metadata that arise from the use of Vercel's services are personal data, Vercel is itself the controller for them under its data processing addendum.

This website counts its visits itself. No analytics service of a third party is used. An entry is recorded when your browser loads a page of this website as a whole (for example when you open a link to it, type its address or reload it), also for addresses that do not exist. Changes of page within the website that do not reload the page are not counted. Prefetching by the browser is not counted, and neither are requests from programs that identify themselves as automated (bots) in their user agent. Each entry contains:

• date and time
• the requested address (path), without parameters
• the domain name of the website you came from, if your browser sends it (only the domain name, for example google.com, not the address of the page; for links within this website only the note "internal")
• country, region and city, as determined by the hosting provider Vercel from your IP address
• a visitor value for the day (see below)
• a sequential number, the name of the website and the type of access (page load)

How the visitor value is formed: with every request, your browser transmits your IP address and information about your browser and operating system (user agent). To count how many different visitors there are per day, this website's server (a Vercel function) first calculates an intermediate value from your IP address and user agent with a keyed one-way function (HMAC-SHA-256). The secret key for it is kept in the website's server environment at Vercel. Only this intermediate value is sent to the database, not your IP address, your user agent or the secret key. The database combines the intermediate value with a random key for the current day (UTC) and the name of the website, forms a new one-way value from it and stores only that as the visitor value. The intermediate value itself is not stored in the database. The visitor statistics do not store your IP address or user agent; for Vercel's own server logs see section 3.

As long as the key of a day exists, the visitor value is pseudonymous, not anonymous: I have access to both the secret key and the day's key and could therefore recalculate the visitor value from a known IP address and user agent. The key of a day is deleted from the live database when the first entry of a later day is recorded; if there is no visit on the following days, it is kept until the next visit. After that, the visitor values of that day can no longer be recalculated with the data in the live database. Because each day has its own key, the visitor value changes from day to day, so visits on different days cannot be linked through it.

Within one day, entries with the same visitor value show which pages one browser (more precisely: one combination of IP address and user agent) opened, in which order and at what time. The visitor statistics are not combined with other data and are not used to identify you or to build profiles across days.

Purpose and legal basis: the purpose is to know how many people visit this website per day, which pages they look at (also within one visit) and through which websites they find it, in order to improve the website and its content. The legal basis is Art. 6 (1)(f) GDPR; my legitimate interest is this knowledge about how the website is used. In weighing this interest against yours, I have taken into account that the visitor value is formed with a secret key of the server and can be matched to an IP address only as long as the day's key exists, that the day's key is deleted, that no profiles are built across days, that your visits are not tracked across other websites, that the Global Privacy Control signal is respected and that you can object at any time (section 6). The data are reduced for this purpose: no IP address, no user agent and no cookies are stored, the location only down to the city, referring websites only by domain name.

Recipients and transfers to third countries: the visitor value is calculated on Vercel's servers (section 4). This website's server functions are configured to run in the Frankfurt am Main region (EU); for page loads, processing in other Vercel regions, also outside the EU, cannot be ruled out. The entries are stored in a database of the service Neon. The provider is Databricks, Inc., 160 Spear Street, Suite 1300, San Francisco, CA 94105, USA, the parent company of Neon, LLC. Databricks processes the data on my behalf on the basis of a data processing agreement (Art. 28 GDPR). The database is located in the Frankfurt am Main region (EU). Databricks, Inc. is a US company and uses further subprocessors and affiliated companies, some outside the EU, in particular in the USA (including Amazon Web Services, Inc. as cloud provider and Grafana Labs for infrastructure services; full list: https://www.databricks.com/legal/databricks-subprocessors). A transfer of data to the USA and to other third countries can therefore not be ruled out. Databricks, Inc. and Neon, LLC are certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). For transfers to other third countries without an adequacy decision, Databricks' data processing agreement provides for the EU Standard Contractual Clauses (Art. 46 (2)(c) GDPR); the agreement is available at https://www.databricks.com/sites/default/files/legal/dpa-20230721.pdf. Databricks' privacy notice: https://www.databricks.com/legal/privacynotice.

Storage period: entries older than 25 months are deleted automatically, so that each period can be compared with the same period of the previous year. The deletion runs when the first entry of a new day (UTC) is recorded, so an entry can remain until the first visit after it has reached that age. The key of a day is kept until the first entry of a later day is recorded.

The visitor statistics set no cookies, use no local storage, session storage or similar storage on your device, and no script on the pages sends data for this purpose. Only information your browser sends to the server with the page request anyway is used (in particular IP address, user agent and, if sent, the referring page).

Providing this data is not required by law or by contract. Not providing it has no consequences for your use of the website. No automated decision-making, including profiling (Art. 22 GDPR), takes place. The controller is named in section 1. You can object to this processing (section 6); for your right to lodge a complaint see section 11.

Where I process personal data on the basis of Art. 6 (1)(f) GDPR (sections 3, 5 and 10), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 (1) GDPR). An email to work@seungdance.com is enough.

Visitor statistics: because no IP address is stored, entries can be assigned to you only as long as the key of the day in question exists, and only if you tell me your IP address and the exact user agent of your browser. After that, entries can no longer be assigned to you (Art. 11 GDPR).

A simple way to object in advance is the Global Privacy Control signal: if your browser sends it with a request (the header Sec-GPC with the value 1), the visitor statistics record no entry for that request. This applies only in a browser in which the signal is switched on, and only while it is switched on.

Typefaces (Big Shoulders, Schibsted Grotesk and Inter) are self-hosted through Next.js, which downloads the font files at build time and serves them from this site’s origin. No requests are made to Google Fonts while you view the page.

Photographs and other static images are served from this site’s own /public directory, always via Next.js image optimization.

The site keeps one value in your browser’s session storage, which records that you have already passed the opening screen so it is not shown again. It never leaves your browser and is deleted when you close the tab.

Some work pages show a video from YouTube. Until you press play, nothing is loaded from YouTube: the still image is fetched by this site’s own server and delivered from this site’s origin.

When you press play, a player from youtube-nocookie.com is loaded into the page. From that moment YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) receives your IP address, browser data and the address of the page, and may store information on your device. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. By pressing play you choose to load the player (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG); if you do not press play, no data is sent to YouTube. Details: policies.google.com/privacy.

Other links to third-party platforms, such as Instagram, are plain links that open in a new tab. Only when you follow one does that platform receive the usual request data, and its own privacy policy applies.

This website does not use tracking cookies, analytics services of third parties, advertising, tag managers or social plugins. It counts its visits itself, without cookies and without local or session storage on your device (see section 5). Only strictly necessary technical cookies may be set by the hosting infrastructure. No consent banner is shown. The YouTube player loads only when you press play (see section 8).

If you contact me by email, the information you send (email address, message content, any attachments) is processed solely for the purpose of answering your request (Art. 6 (1)(b) and (f) GDPR). Correspondence is stored for as long as it is needed for that purpose and then deleted, unless statutory retention duties apply.

Under the GDPR you have the right to:

• Access your personal data (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time with effect for the future (Art. 7 (3))

Right to object: see section 6.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Baden-Württemberg is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (baden-wuerttemberg.datenschutz.de).

For any questions regarding data protection on this site, please contact work@seungdance.com.

This privacy policy may be updated to reflect changes in the website or in legal requirements. The current version applies to your visit.

Last updated: 10 November 2026.