Privacy Policy
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Grischa Overbeck
Email: grischaoverbeck@gmail.com
2. Overview
This website is a private portfolio. It uses no cookies, no tracking and no analytics tools. No third-party content is embedded – fonts and all other files are served directly from this server.
Personal data is only processed where technically necessary to deliver the website, when you send me an email, or when you actively use one of the interactive demos (see section 6).
3. Hosting
This website runs on a virtual private server (VPS) provided by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. I operate the server myself; Hostinger provides the server infrastructure and network connectivity.
When you access the website, your IP address is necessarily processed so that the content can be delivered to your browser. The web server writes no access logs (server log files); IP addresses and other connection data are not stored.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website reliably and securely.
A data processing agreement pursuant to Art. 28 GDPR is in place with Hostinger. Further information: Hostinger privacy policy.
4. SSL/TLS Encryption
The connection to this website is encrypted via TLS (indicated by “https://” in the address bar). Data you transmit to this website therefore cannot be read by third parties.
5. Local Storage in Your Browser
When you switch between light and dark mode, your choice is saved in your browser's local storage (localStorage) under the key theme. The value never leaves your device and is not sent to the server. You can delete it at any time via your browser settings.
This storage is strictly necessary to provide the setting you explicitly requested (Section 25(2) No. 2 TDDDG); consent is therefore not required.
6. Interactive Demos
Some case studies contain live demos. Data is only processed when you actively trigger a demo. Please do not enter personal or confidential data in the demos and do not upload images in which people can be identified.
Object Detection (Image Upload)
When you upload an image in the object detection demo, it is sent to this server, analysed in memory only, and the result image is returned directly to your browser. The image is not stored and is not passed on to third parties.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in demonstrating how my projects work at your request.
AI Demo (OpenRouter)
When you submit text in the AI demo, this server forwards it to OpenRouter, Inc. (USA), which passes it on to the provider of the selected language model. The response is returned to your browser. Only the text you entered is transmitted; your IP address is not passed on to OpenRouter, because the request is made from this server. The text is not stored on this server.
The demo uses free models only. Their providers may log inputs under their own terms and use them to improve their models. Processing may take place in the USA or other third countries that may not offer a level of data protection comparable to the EU.
The transfer is based on your consent (Art. 6(1)(a) GDPR, and Art. 49(1)(a) GDPR for the transfer to a third country), which you give by submitting after the notice shown at the demo. Use is voluntary. Further information: OpenRouter privacy policy.
7. Contact by Email
If you email me, I process the information you provide (e.g. name, email address, content of your message) in order to respond to your enquiry. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in answering your enquiry. Where your enquiry aims at concluding a contract, the legal basis is Art. 6(1)(b) GDPR.
The email address is operated via Google Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your message is therefore stored on Google's servers. I delete enquiries once they have been fully dealt with, unless statutory retention obligations apply.
8. Your Rights
You have the following rights regarding your personal data:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation.
An informal email to the address above is sufficient to exercise your rights.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).