Privacy policy.

Data controller

The person responsible for processing personal data in connection with this personal website is:

datenschutz@jensvonderlippen.de

This address is the contact point for privacy enquiries; it does not designate a separate data protection officer.

What happens when you visit

The website provides information about my professional background and projects. It has no separate user accounts, contact form, comments, newsletter subscriptions, uploads or payment system. Project views and animations run in your browser. Font files are served by this website.

A visit still involves technical access data being processed by the hosting provider, the platform analytics described below, and any information you choose to send when contacting me.

Hosting and technical access data

The website is hosted through ChatGPT Sites by OpenAI. For an operator in the European Economic Area, the OpenAI Data Processing Addendum identifies OpenAI Ireland Limited as the contracting party. OpenAI processes data to host, maintain and support the website under the Sites Terms and the incorporated Data Processing Addendum.

Delivering and securing the site involves the IP address, requested address, time of request, and technical browser and device information. The purpose is reliable delivery and the detection and resolution of faults and abuse. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the secure operation of this website.

OpenAI Sites Terms · Data Processing Addendum

Platform visitor analytics

ChatGPT Sites automatically records page views and unique visitors and provides the operator with statistics over time. This does not require analytics code added to this website. The statistics help understand usage and reach.

The website's own code includes neither Google Analytics nor advertising pixels. This does not mean that the hosting platform processes no usage data. OpenAI's cookie documentation lists the __Host-appgarden-visitor analytics cookie with a 90-day lifetime. This cookie was not set in the public requests to this website checked on 11 November 2026. This is not a guarantee for all regions or future platform versions. The complete identification method, analytics retention periods and appropriate legal basis have not yet been fully confirmed. This notice neither obtains nor replaces consent.

OpenAI documentation on Sites analytics

Cookies and browser storage

The portfolio code I provide sets no cookies of its own and stores no information persistently in localStorage or sessionStorage. The animation pause setting lasts only while the page remains open. The public website requires no ChatGPT sign-in and does not read ChatGPT profile data.

The hosting platform uses Cloudflare for delivery and protection against automated abuse. The following security cookies were observed during testing:

• __cf_bm: helps detect automated requests; according to Cloudflare, it expires after 30 minutes of continuous inactivity.
• cf_clearance: stores the result of a security check; the lifetime observed during testing was one year.

Where this access is strictly necessary to securely deliver the requested website, device access relies on section 25(2)(2) TDDDG and the processing of personal data on Article 6(1)(f) GDPR. My legitimate interest is preventing abuse. This basis does not automatically apply to optional analytics cookies. The preceding section explains platform analytics.

Cloudflare cookie information · OpenAI Cookie Notice · OpenAI Europe Privacy Policy

Contact by email

If you email datenschutz@jensvonderlippen.de, I process your sender address, your name if provided, the message and attachments to respond to your enquiry. My configuration forwards messages through united-domains to Google Gmail. These providers therefore process the data needed for delivery and mailbox operation.

General enquiries are handled under Article 6(1)(f) GDPR (legitimate interest in communication). Contractual or pre-contractual enquiries rely on Article 6(1)(b) GDPR; compliance with statutory privacy obligations relies on Article 6(1)(c) GDPR.

Contacting me is voluntary. Without sufficient information, I may be unable to respond. Please send only the information needed for your enquiry. Emails are not automatically end-to-end encrypted.

united-domains privacy information · Google Privacy Policy

Links to LinkedIn and projects

LinkedIn and the linked project websites are ordinary links, not embedded social media plugins. You contact the relevant provider when you follow a link. That provider's own privacy information then applies. LinkedIn also processes communications sent through its platform.

Retention and recipients

Correspondence I handle is kept for as long as necessary to address and document the resolution of the enquiry. It is then deleted unless a statutory retention duty or specific evidence needed for legal claims requires it to be kept. The criteria are the purpose, closure of the matter and any applicable statutory period.

Recipients include the hosting and communication providers named above and their service providers. Authorities or other bodies receive data only where there is an applicable legal basis. No site-specific deletion period has yet been confirmed for platform technical logs, analytics or backups; no blanket deletion deadline is therefore promised.

Processing outside the EEA

OpenAI, Google and their service providers may process information outside the European Economic Area, particularly in the United States. OpenAI's Data Processing Addendum describes adequacy decisions or EU Standard Contractual Clauses for such transfers. The actual hosting region of this site and details of individual transfers still require confirmation. Exclusive storage in Germany or Europe is not promised.

You can request information and, where applicable, a copy of relevant safeguards using the contact address above. The linked provider notices contain further information.

Your rights

Subject to the applicable statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You may withdraw any consent at any time for the future without affecting the lawfulness of processing before withdrawal.

Objection: Where processing relies on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. Contact datenschutz@jensvonderlippen.de to do so.

Under Article 77 GDPR, you may also complain to a data protection supervisory authority, particularly in the country of your residence, workplace or the alleged infringement. The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate is a contact point for the operator's location.

Contact the Rhineland-Palatinate data protection authority

The website makes no automated decisions about you with legal or similarly significant effects and performs no profiling of its own.