Legal

Privacy

Information on the processing of personal data on this website under Art. 13 GDPR and § 25 TDDDG.

1. Controller

Paul Bijan Coch
Kastanienallee 25
20359 Hamburg
Deutschland

2. Hosting and server logs

When you open a page the browser sends technically necessary data (IP address, time, requested address, referrer, user agent). The host Vercel Inc. (440 Terry Avenue North, Seattle, WA 98109, USA) processes this data to deliver the site, defend against attacks and keep it reachable. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure operation).

The host is based in the USA. Where a transfer to a third country takes place, it relies on the EU-US Data Privacy Framework and/or standard contractual clauses, where the provider offers them. Host notice: https://vercel.com/legal/privacy-policy · Data processing agreement: https://vercel.com/legal/dpa.

3. Technically necessary storage

An optional colour scheme (light/dark) may sit in localStorage under pbc-theme. The language choice (de/en) sits in localStorage and a cookie under pbc-lang so `/` can open the last language immediately. That is technically necessary storage under § 25 (2) TDDDG, not tracking. There are no analytics, advertising or marketing cookies and no consent banner for optional services.

4. Fonts and media

Figtree and Caveat are served from this domain (self-hosted). There is no fetch from Google Fonts or other font services. Images, the Memoji and 3D models also live on this host.

5. Forms and share intake

The /en/share page builds a draft in the browser. Nothing is sent to a server of this offering. Opening the page with query parameters creates a server-log entry at the host, as with any other request.

6. No further processing

There is no user account, no newsletter, no embedded social plugins, no reach measurement and no disclosure for advertising. Linked third-party pages (for example Revent or the host) are their own controllers.

7. Retention

The host keeps server logs according to its practice, typically a few days to weeks, unless a longer retention is needed to investigate faults or abuse. The theme flag stays on the device until it is deleted.

8. Rights

Under the GDPR you have in particular the rights to:

Access (Art. 15)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing based on Art. 6 (1) (f) (Art. 21)

You also have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR) — usually the authority at your place of residence. The Federal Commissioner for Data Protection and Freedom of Information publishes information at bfdi.bund.de.

9. Obligation to provide data

Without the technical request data the site cannot be delivered. All other details (legal-notice contact, theme) are voluntary.

10. Changes

This notice applies to https://paulcoch.com and will be updated if the technology or the legal situation changes.