Privacy Policy

The controller for data processing on this website is Rohit Sonawane. You can reach me at rmsonawane06@gmail.com. Full contact details are in the Imprint.

Contact form. If you use the contact form, I process the name, email address, and message you submit. I use this solely to read and reply to your enquiry. The legal basis is Art. 6 (1)(b) GDPR (steps prior to entering a contract) and my legitimate interest in responding to you, Art. 6 (1)(f) GDPR.

Server logs. When you visit, the hosting provider automatically records standard technical data such as your IP address, browser type, the page requested, and the time of the request. This is necessary to deliver the site securely and reliably (legal basis: Art. 6 (1)(f) GDPR). I do not use this data to identify you.

Cookieless analytics. I use Vercel Web Analytics to understand aggregate traffic (page views, popular pages, rough device and country breakdowns). It is cookieless, sets nothing on your device, does not collect personal data or build a profile, and cannot track you across other sites. The legal basis is my legitimate interest in understanding how the portfolio is used, Art. 6 (1)(f) GDPR.

Google Analytics (consent-based). If, and only if, you accept the cookie banner, Google Analytics (GA4) runs and sets analytics cookies to measure aggregate traffic. Advertising and personalization signals are switched off. This processing relies on your consent, Art. 6 (1)(a) GDPR, and you can withdraw it at any time by clearing this site's cookies (which brings the banner back). If you decline, Google Analytics is not loaded and no data is sent to Google. Google may process data on servers in the United States; that transfer is covered by the safeguards noted below. See the Cookie Policy for the exact cookies.

I rely on a few processors to run this site. Each handles data only on my instruction:

• Vercel Inc. hosts the website and processes the server logs described above.
• Resend delivers the email generated by the contact form so your message reaches my inbox.
• Vercel Web Analytics provides the cookieless, aggregate visit measurement described above.
• Google (Google Analytics) provides consent-based traffic measurement, and only after you accept the cookie banner.

Where a provider processes data outside the EU/EEA, that transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Contact enquiries are kept only as long as needed to handle your request and any follow-up, after which they are deleted unless I am legally required to retain them. Server logs are kept for a short period by the host for security and then rotated out.

Under the GDPR you have the right to:

• access the personal data I hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict or object to processing (Art. 18, 21);
• receive your data in a portable format (Art. 20);
• lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these, just email rmsonawane06@gmail.com. You can also contact your local German data protection authority if you believe your rights have been breached.

I may update this policy as the site evolves. The date at the top reflects the latest revision.