Privacy policy

1. Controller

Katriina Viita
Berlin, Germany
Email: katriina.viita (at) gmail (dot) com

2. Hosting

This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes server log data (IP address, browser type, date and time of access, referring page) automatically to run and secure the site. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in a functioning, secure website. Logs are stored temporarily and not merged with other data. A data processing agreement is in place with Vercel. Data may be processed in the USA on the basis of the EU-US Data Privacy Framework and EU Standard Contractual Clauses.

3. Analytics

This site uses Vercel Web Analytics. It counts page views and aggregate visitor statistics without cookies and without tracking individual visitors across sites. No personal profile is built. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in understanding how the site is used.

4. Contact form and email

When you send the contact form, your name, email address and message are sent via Web3Forms to my email inbox. Web3Forms acts as a processor and does not use the data for its own purposes. If you email me directly, the same data reaches me by email. Legal basis: Art. 6(1)(b) GDPR for enquiries about working together, otherwise Art. 6(1)(f) GDPR, legitimate interest in answering messages.

5. Spam protection (hCaptcha)

The contact form uses hCaptcha by Intuition Machines, Inc. (USA) to check that messages come from a person. hCaptcha loads only when you open the contact form. It then processes data such as your IP address, browser details and how you interact with the check, and may set cookies. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in protecting the form from spam. Data may be processed in the USA on the basis of EU Standard Contractual Clauses. Details: hcaptcha.com/privacy.

6. Fonts and cookies

Fonts are hosted on this server. No data is sent to Google or other font providers. This site sets no cookies of its own.

7. External links

Links to LinkedIn, GitHub and other sites open those sites. Their own privacy policies apply there.

8. Retention

Messages are kept only as long as needed to answer them or to work together, then deleted, unless the law requires longer retention.

9. Your rights

You have the right to access, correct or erase your data, to restrict or object to processing, and to data portability (Art. 15–21 GDPR). You can also complain to a data protection authority. In Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de). To use any of these rights, email me.