Privacy Policy

Controller

Email: job@alexandrefernandes.dev

Hosting and server log files

This website is hosted by Vercel Inc. (USA). Whenever a page is requested, Vercel automatically processes technical data sent by your browser: IP address, date and time, the page requested, referrer URL, browser and operating system. This data is needed to deliver the website and keep it secure.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is providing the website securely and reliably. How long these logs are kept is determined by Vercel.

• Vercel privacy policy

Performance measurement (Vercel Speed Insights)

To measure how fast the website loads, I use Vercel Speed Insights. For each measurement it records the page visited, browser, operating system, device type, connection speed, country and loading metrics (Web Vitals). The data is not linked to individual visitors or IP addresses, and no cookies are set.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a fast, technically sound website.

• Speed Insights privacy information

Visitor statistics (Umami)

For statistics about visits I use Umami Cloud (Umami Software, Inc., USA). Umami works without cookies and stores nothing on your device. It records the page visited, referrer URL, browser, operating system, device type, screen size, language and approximate location. Your IP address is only used to determine that approximate location and is not stored, and visits are not linked to you as a person.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is understanding which content on my website is read.

• Umami privacy policy

Contact form

If you write to me through the contact form, your name, email address and message are sent via a Cloudflare Worker (Cloudflare, Inc., USA) to the email service Resend (Resend, Inc., USA) and delivered to me by email to a Microsoft Outlook.com mailbox. The data is used only to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a job or another contract, and Art. 6(1)(f) GDPR otherwise (legitimate interest in answering enquiries). I delete your message once it has been dealt with, unless statutory retention obligations apply.

• Cloudflare privacy policy
• Resend privacy policy
• Microsoft privacy statement

Contact by email

If you email me at job@alexandrefernandes.dev, your message is stored by my email provider Hostinger (Hostinger International Ltd., Cyprus) and used only to handle your enquiry. The legal basis and retention period are the same as for the contact form.

• Hostinger privacy policy

Fonts and 3D graphics

Fonts and the 3D graphic on the home page are loaded from this website's own server. No data is sent to Google or other third parties for them.

Transfers to third countries

Vercel, Umami, Cloudflare, Resend and Microsoft are based in the USA or process data there. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on Art. 6(1)(f) GDPR, you can object to it under Art. 21 GDPR. An informal email is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Independent Centre for Privacy Protection Schleswig-Holstein (ULD).

• ULD Schleswig-Holstein