Privacy
This site sets no cookies, runs no analytics and embeds nothing from a third party. What it does store, and what the server necessarily sees, is described below in full.
Controller
Matti Schulz Am Rienegraben 8 18519 Sundhagen Germany Email: hello@matti-schulz.de
No data protection officer has been appointed. The size and nature of this processing does not require one under Art. 37 GDPR.
The short version
There is no account, no contact form, no newsletter, no tracking pixel, no advertising and no analytics of any kind. I do not know who visits this site.
Two things nevertheless happen: the server that delivers the page records a request in its log, and your own browser remembers the settings you choose. Neither is combined with the other and neither leaves the parties named here.
Hosting and server logs
Vercel
This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
When you open the page, Vercel automatically records the request in a server log file. That log contains the requested address, the referring page if there is one, the browser type and version, the operating system, the time of the request and the IP address in shortened or full form.
The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is the technically error-free delivery and the security of this site, which cannot be provided without logging requests. This data is not merged with any other source and is not used to identify you.
A data processing agreement under Art. 28 GDPR is in place with Vercel. Because Vercel is based in the United States, transfers are covered by the EU Standard Contractual Clauses. Log data is generally retained for a maximum of 30 days.
Settings stored in your browser
What is stored
This site uses your browser's local storage, not cookies. Nothing stored there is ever transmitted to me or to anyone else; it stays on your device and is readable only by this site.
Five values may be written: your chosen colour theme, your chosen language, whether interaction sounds are switched on, whether you have dismissed the web design notice, and whether you have seen the keyboard shortcuts sheet. Each is written only once you make that choice.
The legal basis for storing them is § 25 (2) no. 2 TDDDG. They exist solely so the site can present itself the way you asked it to, which is a service you explicitly requested, so no consent banner is required and none is shown. You can delete them at any time by clearing site data in your browser, and the site will simply go back to its defaults.
Links to other services
Nothing is embedded
The music section links to Spotify, and the site links to GitHub, LinkedIn and matti-schulz.de. These are ordinary links. No player, no widget, no script and no image is loaded from any of them, so no data reaches those services while you are on this page.
The album covers shown are served from this site's own domain, not from a third party. Only when you actively click a link does the destination receive a request from you, and their privacy policy applies from that point on.
Contacting me
There is no contact form. If you write to the email address given here, your message and address are processed solely to answer you, on the basis of Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) where your enquiry concerns a possible contract. Messages are kept until the matter is settled and no retention obligation stands in the way.
Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). To exercise any of them, write to the address above.
You also have the right to lodge a complaint with a supervisory authority. The competent one here is Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin.