GDPR Privacy Policy

1. Introduction
This Privacy Policy describes how personal data is processed on this portfolio website in accordance with the General Data Protection Regulation (EU 2016/679). This site is informational only and does not request or store personally identifiable information from visitors.

2. Data Collected
This website does not collect or store:

  • Names

  • Email addresses

  • Account details

  • Any user-submitted data

The only information processed is aggregated usage data collected through a privacy-focused analytics tool (such as Umami Analytics). The data may include:

  • Browser type and version

  • Device type

  • Referring website

  • Pages visited and time spent on the site

  • Approximate geographic region (non-identifiable)

  • IP addresses (processed in anonymized form)

This data is non-personal and cannot be used to identify an individual visitor.

3. Purpose of Processing
Analytics data is used exclusively for:

  • Understanding how visitors use the website

  • Improving content, layout, and user experience

  • Identifying technical or performance issues

No profiling, behavioral targeting, or advertising occurs on this website.

4. Legal Basis for Processing
Analytics data is processed under the following lawful basis:

  • Legitimate interest (Article 6(1)(f) GDPR), specifically the interest in maintaining and improving website performance.

5. Cookies
Depending on configuration, the analytics tool may:

  • Use no cookies at all, or

  • Use a single, privacy-friendly cookie for basic visit tracking

You may disable cookies in your browser if desired.
No advertising or tracking cookies are used.

6. Data Sharing and Third Parties
Analytics data is processed either:

  • On a self-hosted server, or

  • By a privacy-focused analytics provider compliant with GDPR

Data is not sold, shared, or transferred to external parties for marketing or advertising.

7. Data Retention
Analytics data is stored only for as long as needed to analyze website performance.
Retention periods depend on the analytics configuration but typically range from 6 to 24 months.

No personally identifiable information is retained.

8. Your Rights Under GDPR
Because no personal data (such as names or email addresses) is collected, many GDPR rights do not apply.
However, you retain the rights to:

  • Object to analytics tracking

  • Disable cookies in your browser

  • Request information about how aggregated analytics data is processed

9. Security
All data transmission on this website is encrypted via HTTPS.
No personal information is stored, transmitted, or processed directly by the site.

10. Contact Information
If you have questions regarding this Privacy Policy, please contact:
Christoffer Rozenbachs
Christoffer.Rozenbachs@gmail.com