Privacy policy

1. Controller

Carla Beherens, Steinhauerweg 5, 76228 Karlsruhe, Germany. Email: carlabeherens@gmail.com

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes technical data sent by your browser: IP address, date and time of access, page requested, browser and operating system, and the referring page.

This data is needed to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Vercel stores log data only for a short time and does not combine it with other data.

A data processing agreement (Art. 28 GDPR) is in place with Vercel. Vercel processes the data only on my instructions and only as far as needed for hosting.

Vercel may process data in the USA. Transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. More information: vercel.com/legal/privacy-policy

3. Contact by email

If you email me, I process the information you send (e.g. name, email address, message) to reply to your request. The legal basis is Art. 6(1)(b) or (f) GDPR. I delete the data once it is no longer needed and no legal retention period applies.

4. Fonts, videos and external links

Fonts and videos are loaded directly from this website; no data is sent to third parties such as Google. The LinkedIn link is a plain link: only when you click it do you go to LinkedIn, where their privacy policy applies.

5. Storage period

Unless a more specific storage period is stated in this privacy policy, personal data is kept only until the purpose of processing no longer applies, you request a justified deletion, or no legal retention period applies anymore.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Just send me an email.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

7. Right to object (Art. 21 GDPR)

Where processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to it at any time on grounds relating to your particular situation. I will then stop processing the data concerned, unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.