Legal
Privacy notice
How I handle personal data on this website. Effective 19 October 2026.
Controller
Janis Schanbacher, Prinz-Handjery-Str. 70c, 14167 Berlin, Germany. Email: hi@janisschanbacher.com. I have not appointed a data protection officer because I am not legally required to.
Summary
- This website sets no cookies and uses no analytics, tracking pixels, embedded social media or newsletter.
- Fonts and images are served from this website itself, not from third-party font or media services.
- Personal data is processed only when you visit the site (technical connection data) or contact me.
- No profiling or automated decision-making takes place.
Visiting the website
When you open a page, your browser transmits technical data to the hosting provider so the page can be delivered: IP address, date and time, requested URL, referrer, browser and operating system information. The hosting provider keeps this data in security and access logs for a limited time to operate and protect the service.
Lawful basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure website). Retention follows the hosting provider’s log retention; I do not evaluate these logs for marketing purposes.
Contact form and email
The contact form asks for your name, email address and message (required), and optionally your company or organization, timing and budget or engagement scope. Optional fields can be left empty; the required fields are needed so I can understand and answer your enquiry. If you email me directly, I process the data you choose to send.
Your submission is forwarded as a notification email to my business mailbox. Your email address becomes the reply address of that notification so I can respond to you directly. The message is not stored in a database on the website, and no copy is kept in your browser.
Lawful basis: Art. 6(1)(b) GDPR for enquiries aimed at a contract or pre-contractual steps, and Art. 6(1)(f) GDPR (legitimate interest in answering business correspondence and preventing abuse) for other correspondence and for the spam and rate-limiting checks on the contact endpoint.
Retention: enquiries that do not lead to a business relationship are deleted no later than twelve months after the final substantive response, unless a specific legal claim requires keeping them longer. Data that becomes part of a contract or business record is kept for the applicable statutory retention periods.
Recipients and processors
The following service providers process data on my behalf. I have no other recipients and do not sell data.
| Provider | Purpose | Data |
|---|---|---|
| Netlify, Inc. | Hosting of the website and the contact endpoint (serverless function) | Technical connection data such as IP address, request time, requested URL, browser type; hosting and security logs |
| Brevo (Sendinblue SAS) | Transactional delivery of contact notifications and enquiry acknowledgements | Name, email address, optional company/timing/budget and message text |
| Apple Inc. (iCloud Mail, custom domain) | My business mailbox that receives contact notifications and direct emails | The content of your enquiry and any later correspondence |
Locations and transfers
- Netlify, Inc.: Netlify is based in the United States and delivers content through a global network. Processing takes place under Netlify’s data processing agreement, with EU standard contractual clauses for transfers outside the EU/EEA.
- Brevo (Sendinblue SAS): Brevo is based in France and stores transactional email data in the European Union. Processing takes place under Brevo’s data processing agreement. I receive your enquiry by email, and a plain-text acknowledgement with a copy of your submitted information is sent to the email address you provide. I do not use email opens or clicks to build recipient profiles. Message previews are not stored, and delivery logs are deleted after one month.
- Apple Inc. (iCloud Mail, custom domain): Apple operates globally. Mail processing is governed by Apple’s iCloud terms and Apple’s data transfer safeguards.
Your rights
Under the GDPR you have the right to access your personal data (Art. 15), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise these rights, email hi@janisschanbacher.com.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de.
External links
This website links to external sites such as LinkedIn, GitHub and Minol. When you follow a link, the privacy notice of that provider applies. No data is transmitted to these providers merely by viewing this site.
Changes
I update this notice when the website’s processing changes, for example if a new service provider is used. The effective date above always refers to the current version.