Privacy Policy

Data Controller

Hans Günter Mahr Gothaer Straße 16 96487 Dörfles-Esbach Bavaria, Germany E-Mail: orvyan@proton.me

Data We Collect

Server log files (via Vercel hosting) When you visit this website, your browser automatically transmits the following data to our hosting provider: • IP address of the requesting device • Date and time of access • Name and URL of the requested file • Browser type and version • Operating system • Referrer URL This data is technically necessary for delivery of the website and is processed by Vercel Inc. (our hosting provider). The retention period for technical server log data depends on the hosting configuration and Vercel's applicable operational policies. The data is kept only as long as necessary for the technical provision and secure operation of the website. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in the secure operation of the website. Language preference (localStorage) This website stores your language preference in your browser's localStorage under the key "orvyan-lang". This is not a cookie and is never transmitted to any server. It contains no personal data and remains exclusively on your device.

Hosting Provider: Vercel Inc.

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. Vercel acts as a data processor pursuant to Art. 28 GDPR and processes technical server log data solely for the purpose of providing the hosting service. Data transfers to the USA are based on Vercel's certification under the EU–US Data Privacy Framework, which ensures an adequate level of data protection. Vercel's Privacy Policy: https://vercel.com/legal/privacy-policy

PostureMaxing Browser Demo

When you start the browser demo on /projects/posture-maxing, the following processing occurs: Webcam Access Your browser asks for camera permission. Captured frames are processed entirely on your device by the MediaPipe Pose Landmarker (WebAssembly). Frames are never transmitted, stored, or uploaded. Camera access ends immediately when you stop the demo. Legal basis: Art. 6(1)(a) GDPR (consent via browser permission prompt) and, for the processing of biometric data, Art. 9(2)(a) GDPR (explicit consent). No biometric data is retained. Third-party CDNs The MediaPipe runtime consists of two parts, each loaded from a different public CDN: • WebAssembly bundle from jsDelivr (operated by Prospect One / Cloudflare) • Pose-detection model file from Google Cloud Storage (operated by Google LLC, USA) When the demo starts, your IP address is transmitted to both providers as part of standard HTTP requests. No personal data beyond this technical transfer is sent. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in delivering the demo). The data transfer to Google in the USA is based on Google's certification under the EU–US Data Privacy Framework. jsDelivr Privacy Policy: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net Google Privacy Policy: https://policies.google.com/privacy External links Links to github.com transmit your IP address and User-Agent to GitHub when clicked. GitHub Privacy: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

Cookies

This website does not use cookies. The language preference is stored in localStorage, which is a browser-side storage mechanism that is never sent to a server and does not track users across websites.

Your Rights (GDPR)

You have the following rights under GDPR: • Right of access (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object (Art. 21 GDPR) • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) Competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach, Germany https://www.lda.bayern.de

Data Protection Contact

For any questions regarding the processing of your personal data, please contact: orvyan@proton.me