A small website.
A simple privacy policy.

Who is responsible?

I am the controller for personal data processed in connection with this portfolio under the General Data Protection Regulation (GDPR).

Cookies, tracking, and browser storage

This portfolio does not set cookies, use local storage or session storage, or run analytics, advertising pixels, session recordings, or fingerprinting. There is no cookie-consent banner because the current site uses no optional tracking or device storage requiring consent.

Images, logos, styles, and the small script for scroll effects are served from this website. There are no embedded YouTube players, Substack forms, or social-media widgets. Your browser may cache ordinary website files to load the site efficiently; the site does not use that cache to identify or track you.

Hosting and technical connection data

The site is hosted using Microsoft Azure Static Web Apps. When you request a page or image, Microsoft’s hosting and delivery infrastructure receives technical information such as your IP address, the requested URL, the time of the request, browser information, and a referring URL if your browser sends one. Technical records may be processed to deliver the website, maintain reliability, prevent abuse, and investigate security incidents.

The legal basis is Article 6(1)(f) GDPR: my legitimate interest in providing a secure, reliable public portfolio. Technical connection data is necessary to serve the site. I do not use it to create visitor profiles, and I have not configured a separate visitor analytics or access-log database. Any hosting security or operational records are subject to Microsoft’s applicable retention arrangements and are retained only for the relevant operational, security, or legal purposes.

Microsoft and its service providers may process data outside the European Economic Area, including in the United States. Microsoft’s applicable data-protection terms describe the safeguards for international transfers, including EU Standard Contractual Clauses. See the Microsoft Data Protection Addendum and Microsoft Privacy Statement for provider details and safeguards.

If you email me

Contact links open your own email application. If you send a message, I receive your email address, your name if provided, the contents of your message, and any attachments. I use these to respond and handle your request. Email providers involved in delivering and storing the correspondence also process these data.

The legal basis is Article 6(1)(f) GDPR for ordinary correspondence, or Article 6(1)(b) GDPR when your request concerns a contract or steps you ask me to take before entering one. Providing this information is voluntary, but I need a return address and enough details to answer.

I retain correspondence for as long as needed to resolve the request and any related follow-up. Where business correspondence must be retained by law, Article 6(1)(c) GDPR applies for the applicable statutory period. Otherwise, it is deleted when no longer needed.

Links to other websites

The Academy, StackBuddy, Steam, YouTube, Substack, LinkedIn, and GitHub links take you to separate websites. Their images on this portfolio are local copies, so displaying them does not itself connect you to those platforms. If you follow a link, that website receives your connection data and applies its own privacy policy. Its cookies and services are not covered by this policy.

Your rights

Subject to the GDPR’s conditions, you can request access, correction, erasure, restriction of processing, and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Contact mail@patrickgod.com to exercise these rights.

You may also complain to a data-protection supervisory authority, including the authority where you live or work. The local authority for this website’s operator is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).

This portfolio does not make automated decisions about you or carry out profiling.

Changes

This policy will be updated if the website’s features or data processing change. Any future optional tracking requiring consent would need your permission before it starts.