Back to home

Privacy Policy (Datenschutzerklärung)

Last updated: October 2026

1. Controller

Michael Herzog, Valleystraße 56, 81371 München, Germany
Email: michael.herzog22@web.de

2. Overview

This site is a personal portfolio. It sets no cookies, does not use advertising or cross-site tracking and loads no fonts from third parties. For reach statistics it uses Vercel Web Analytics (see section 4). There is no contact form and no registration.

3. Hosting and server log files

The site is hosted by Vercel Inc. (USA). When you visit, the hosting provider processes technically necessary data in server log files, in particular the IP address, date and time, the page requested, the browser type and the referrer URL. This processing is necessary to deliver the site and to ensure its security and stability.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient operation of the site). I have no access to the log data and do not use it for my own analysis.

Data may be transferred to the USA by Vercel. According to its own statements, Vercel Inc. is certified under the EU-US Data Privacy Framework; in addition, the EU Commission's standard contractual clauses are used where required.

4. Reach statistics (Vercel Web Analytics)

To understand how many people visit the site and which pages they read, I use Vercel Web Analytics. According to Vercel it works without cookies and does not build profiles across websites. It records page views with the page address, referrer, country, browser, operating system and device type. Visitors are told apart by a short-lived hash of the request that Vercel discards after a short time, so I cannot see who you are.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in knowing how the site is used and improving it). You can object at any time (Art. 21 GDPR) by emailing me, or block the script in your browser or with a content blocker.

5. External links

This site contains links to LinkedIn. When you click one, you leave my site. Only then does LinkedIn process data according to its own privacy policy. Merely visiting my site does not transmit any data to LinkedIn.

6. Contacting me

If you contact me by email or via LinkedIn, I process your details to answer your request (Art. 6 (1) (f) GDPR, or (b) when preparing a contract). I delete the data as soon as it is no longer needed for this purpose and no statutory retention obligations apply.

7. Your rights

You have the following rights towards me:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for your place of residence. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Changes

I will update this policy when the site or the legal situation changes. The version published here applies.