{"id":150,"date":"2026-11-13T18:43:27","date_gmt":"2026-11-13T18:43:27","guid":{"rendered":"https:\/\/gergey.com\/?page_id=150"},"modified":"2026-11-13T18:45:55","modified_gmt":"2026-11-13T18:45:55","slug":"privacy","status":"publish","type":"page","link":"https:\/\/gergey.com\/de\/privacy\/","title":{"rendered":"Privacy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n
\n \t\t\t

04 \/ PRIVACY<\/p>\n\t\t\t\t\t

Privacy.<\/h1>\n\t\t\t\t\t

How your personal data is processed when you visit gergey.com, in accordance with Art. 13 and 14 GDPR. Last updated: November 2026.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

1. Controller<\/h2>\n\t\t\t\t\t

The controller within the meaning of Article 4(7) GDPR is:

Aurel Gergey
[Street and house number]
[Postcode] [City], [Country]
Email: aurel@gergey.com<\/a>
Phone: [Phone number]

No data protection officer has been appointed, as the legal requirements for doing so are not met.<\/p>\n\t\t\t\t\t

2. Overview and legal bases<\/h2>\n\t\t\t\t\t

This website is a portfolio and contact site. I keep data processing to the minimum needed to run it. There are no user accounts, no newsletter, no analytics, no advertising and no tracking tools.

Depending on the processing, I rely on the following legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (steps prior to entering into a contract or performance of a contract), Art. 6(1)(f) GDPR (legitimate interests, here a secure and functional website and the handling of enquiries). Where terminal equipment is accessed, \u00a7 25 TDDDG also applies.<\/p>\n\t\t\t\t\t

3. Hosting and server log files<\/h2>\n\t\t\t\t\t

This website is hosted by [Hosting provider, address, country]. When you visit it, the web server automatically records the following data in log files: IP address, date and time of the request, requested page or file, HTTP status code, amount of data transferred, referrer URL, browser type and version, and operating system.

Purpose: delivery of the website, technical security, and detection and defence against attacks and misuse. Legal basis: Art. 6(1)(f) GDPR. These data are not merged with other data sources. Log files are deleted automatically after [number, e.g. 7 to 30] days.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider. The site also uses a server-side page cache, which stores pre-rendered pages and does not collect personal data.<\/p>\n\t\t\t\t\t

4. Cookies and local storage<\/h2>\n\t\t\t\t\t

This website does not set cookies for analytics, advertising or tracking. In a regular visit, the server sets no cookies at all.

Two technically necessary mechanisms may be used in your browser: (a) a short-lived entry in your browser's session storage used only to make the page transition animation consistent, which is deleted immediately after the next page loads and contains no personal data; (b) if you change the language, the language choice may be remembered in a strictly necessary cookie or in the page address (\/de\/) so that you see the site in the language you selected. Legal basis: \u00a7 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

You can block or delete cookies and local storage at any time in your browser settings. The site remains fully usable.<\/p>\n\t\t\t\t\t

5. Contact form and email<\/h2>\n\t\t\t\t\t

If you contact me through the contact form or by email, I process the data you provide: your name, email address, company (optional) and your message, as well as any other information you choose to share.

When the form is submitted, the notification email sent to me also contains technical metadata: date and time of submission, the page URL, your browser's user agent and your IP address. A copy of the submission is stored in the website's administration area (Elementor Submissions).

Purpose: to answer your enquiry and, where relevant, to prepare or carry out a collaboration. Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR. Your data are used only for this purpose and are not passed on to third parties for their own purposes.

Storage period: enquiries are deleted once the matter is settled and no statutory retention duty applies, in principle after [number, e.g. 12] months. If a contract is concluded, data are retained as long as commercial and tax retention obligations require (up to 6 or 10 years under the applicable law).

Providing the data is voluntary, but without name, email address and message I cannot answer your enquiry. Emails sent over the internet may be read by third parties on the way; for confidential information, please contact me first about a safer channel.<\/p>\n\t\t\t\t\t

6. Spam protection with Google reCAPTCHA v3<\/h2>\n\t\t\t\t\t

To protect the contact form against spam and automated misuse, the form uses reCAPTCHA v3, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). The service is loaded only on the page containing the form.

reCAPTCHA analyses, in the background, how you interact with the page (for example mouse movements, time spent on the page, browser and device information) and transmits these data together with your IP address and, where applicable, cookies set by Google to Google, in order to calculate a score that tells human visitors from bots. No visible check is shown.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and \u00a7 25(1) TDDDG where such a consent is requested, otherwise my legitimate interest in protecting the form against abuse under Art. 6(1)(f) GDPR. Data are transferred to the USA on the basis of the EU-US Data Privacy Framework (adequacy decision of 10 July 2023) in which Google LLC is certified.

More information: policies.google.com\/privacy<\/a> and policies.google.com\/terms<\/a>.<\/p>\n\t\t\t\t\t

7. Language selection<\/h2>\n\t\t\t\t\t

The website is available in English and German. Translations are served by the TranslatePress plugin, which runs entirely on this server. No data are transmitted to a translation service when you visit the site.<\/p>\n\t\t\t\t\t

8. Fonts, images and videos<\/h2>\n\t\t\t\t\t

All fonts (Inter Tight, Inter and IBM Plex Mono), images and videos are hosted on this website's own server. No connection to Google Fonts, YouTube, Vimeo or any other external content network is made when you view them, so no IP address is transmitted to such providers for this purpose.<\/p>\n\t\t\t\t\t

9. Website security<\/h2>\n\t\t\t\t\t

The website is transmitted over an encrypted HTTPS connection. To protect the administration login against brute-force attacks, a security plugin records the IP address and the timestamp of failed login attempts and may block repeated attempts. This concerns only attempts to log in to the administration area. Legal basis: Art. 6(1)(f) GDPR (security of the website). Data are deleted after a short period, as a rule within 30 days.<\/p>\n\t\t\t\t\t

10. External links<\/h2>\n\t\t\t\t\t

This website contains links to external websites, for example to my LinkedIn profile (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). The links are plain links: no data are sent to LinkedIn until you click on one. After clicking, the privacy policy of the respective provider applies, in this case linkedin.com\/legal\/privacy-policy<\/a>.<\/p>\n\t\t\t\t\t

11. Recipients and processors<\/h2>\n\t\t\t\t\t

Your data are only passed on where this is necessary for the purposes described above. Recipients are: the hosting provider ([Hosting provider]) as processor for hosting, log files and email delivery; the email provider used for aurel@gergey.com as processor; Google Ireland Limited for reCAPTCHA (section 6). Where legally required, data may also be disclosed to authorities or advisers (for example tax advisers). There is no sale of personal data.<\/p>\n\t\t\t\t\t

12. Transfers to third countries<\/h2>\n\t\t\t\t\t

Data are processed within the European Economic Area, with the exception of the transfer to Google LLC (USA) described in section 6, which relies on the EU-US Data Privacy Framework. [Check and adjust if the hosting or email provider processes data outside the EEA; if so, name the safeguard, for example standard contractual clauses.]<\/p>\n\t\t\t\t\t

13. Storage period<\/h2>\n\t\t\t\t\t

I store personal data only as long as needed for the respective purpose: server log files for [number] days, contact enquiries as described in section 5, security data as described in section 9. Where statutory retention periods apply (for example under commercial and tax law), the data are deleted after they expire.<\/p>\n\t\t\t\t\t

14. Your rights<\/h2>\n\t\t\t\t\t

Under the GDPR you have the following rights regarding your personal data:
\u2013 Right of access (Art. 15 GDPR)
\u2013 Right to rectification (Art. 16 GDPR)
\u2013 Right to erasure (Art. 17 GDPR)
\u2013 Right to restriction of processing (Art. 18 GDPR)
\u2013 Right to data portability (Art. 20 GDPR)
\u2013 Right to withdraw consent at any time with effect for the future, without affecting the lawfulness of processing before the withdrawal (Art. 7(3) GDPR)

To exercise your rights, write to aurel@gergey.com<\/a>. I will reply within one month.<\/p>\n\t\t\t\t\t

15. Right to object<\/h2>\n\t\t\t\t\t

Where I process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to this processing (Art. 21 GDPR).<\/strong> I will then stop the processing unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.<\/p>\n\t\t\t\t\t

16. Complaints and automated decisions<\/h2>\n\t\t\t\t\t

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for me is: [Name and address of the competent supervisory authority].

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

I may update this privacy policy when the website or the legal situation changes. The current version is always available at gergey.com\/privacy\/.<\/p>\n\t\t\n<\/div>\n\n<\/main>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

04 \/ PRIVACY Privacy. How your data is handled when you visit this website or write to me. Controller Aurel Gergey, [street, postcode, city, country].Email: aurel@gergey.com Contact form If you send a message through the contact form, the data you enter (name, email, company, message) is used to answer your request. It is sent to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-150","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/pages\/150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/comments?post=150"}],"version-history":[{"count":8,"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/pages\/150\/revisions"}],"predecessor-version":[{"id":200,"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/pages\/150\/revisions\/200"}],"wp:attachment":[{"href":"https:\/\/gergey.com\/de\/wp-json\/wp\/v2\/media?parent=150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}