Privacy Policy
Last updated: 4 November 2026
This policy explains how personal data is processed when you visit https://emilianbestandig.pages.dev/ or contact me through this website.
1. Controller and contact details
The controller responsible for the processing described in this policy is:
Emilian Beständig
Email: emilianbestandig@gmail.com
Phone: +49 176 45211199
You can use these contact details for questions about this policy or to exercise your data protection rights.
2. Website hosting and technical connection data
This website is hosted through Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
When you access the website, technical connection data is processed to deliver its content and protect it against misuse. This includes your IP address, the date and time of the request, the requested resource, and technical information transmitted by your browser, such as browser and operating-system information.
The purpose is to operate a reliable and secure website, deliver its content and investigate technical problems or abuse. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable provision of this website.
Storage: Cloudflare processes this connection data only as long as needed for these purposes, in line with the retention practices described in its own privacy policy.
Cloudflare operates an international network. Details on international transfers are set out in section 8.
Further information: Cloudflare Privacy Policy.
3. Contact, quote requests and project correspondence
If you contact me by email, phone or the quote request form, I process the information needed to respond and discuss your project. Depending on the contact method, this includes your name, email address, phone number, project type, project description and the content of our correspondence.
The quote form requires your name, email address and project details. You are not legally obliged to submit an inquiry, but the form cannot be submitted without its required fields. Additional information is voluntary.
Where processing is necessary to take steps at your request before entering into a contract with you, or to perform that contract, the legal basis is Article 6(1)(b) GDPR. For other inquiries, the legal basis is Article 6(1)(f) GDPR; my legitimate interest is responding to communications and handling business inquiries efficiently.
Inquiry correspondence is deleted after the matter has been conclusively resolved and no further follow-up is reasonably expected, unless it must be retained to meet a legal obligation or to establish, exercise or defend legal claims. Contract-related records are retained for the applicable statutory periods. Processing required by a legal retention obligation is based on Article 6(1)(c) GDPR; processing necessary for legal claims is based on Article 6(1)(f) GDPR.
Quote form: Web3Forms and FormSubmit
The quote form uses two services to receive form submissions and forward them to my email inbox: Web3Forms, available at https://web3forms.com/, as the main service, and FormSubmit, available at https://formsubmit.co/, as a fallback if the main service cannot be reached.
The information you enter is transmitted to the service that handles your submission for this purpose. Technical connection data, including your IP address, is also transmitted when your browser communicates with the service. The legal basis follows the purpose of your inquiry as explained above. How Web3Forms stores and handles submissions is described in the privacy information on its website.
According to FormSubmit's documentation, it retains form submissions for 30 days. This provider-side storage is separate from the retention of the email delivered to my inbox.
Provider information: Web3Forms and FormSubmit.
Spam protection
The quote form contains a hidden field that visitors do not see and that is meant to stay empty. It helps to filter out automated submissions. This website itself does not load Google reCAPTCHA or any other external spam-protection script.
Email delivery and storage
My email address uses Gmail. Google therefore processes the emails sent to or received by that inbox, including message content, sender and recipient details, attachments where supplied, and technical email metadata.
Further information: Google Privacy Policy.
4. Consent preferences and local storage
The website stores your choice about optional services in your browser's local storage so that it can remember and apply that choice on later visits.
The preference record consists of a single value, either "accepted" or "declined", stored under the name "cookie-consent". It has no automatic expiry and remains stored until you change your choice or clear this website's data in your browser. The preference record itself is not sent to my server.
Storing and reading a preference solely to remember and respect your privacy choice is based on section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as it is strictly necessary for that purpose. If the preference record constitutes personal data, Article 6(1)(f) GDPR applies to this preference management; my legitimate interest is respecting your choice.
You can reopen "Cookie settings" in the footer to change your preference or withdraw consent. You can also remove the saved preference by clearing this website's data in your browser.
5. Google Fonts
The website can load the fonts Bebas Neue and Manrope through Google Fonts.
Before you give consent, the website does not contact Google to retrieve these fonts. When you consent through the website's consent banner, your browser retrieves the fonts from Google. This transmits your IP address and technical request information to Google. The purpose is to display the selected fonts. The legal basis for this disclosure and processing is Article 6(1)(a) GDPR.
If you decline, the website uses fallback fonts. You can withdraw your consent through "Cookie settings" in the footer. Withdrawal applies to future processing and does not undo data already transmitted lawfully.
International transfers are addressed in section 8. Further information: Google Privacy Policy.
6. Portfolio videos
The portfolio videos, their cover images and the video player code are stored on this website's own hosting (Cloudflare Pages, see section 2) and are delivered directly from it. No external video platform is used to play them, and no external video player is loaded.
When you press play, your browser requests the video files from the website's hosting. This involves the technical connection data described in section 2.
7. Links to other platforms
The website contains ordinary links to my profiles on Instagram, YouTube, TikTok and X.
When you follow a link, you open the respective provider's service. That provider receives the connection data necessary to serve its page and processes data according to its own privacy information.
8. Recipients and international transfers
Personal data is disclosed to the hosting, form and email services described above as needed to provide their functions, and to optional external services when the relevant conditions for their use are met.
Some of these providers are based outside the European Economic Area or may process data there, in particular in the USA. Information on international transfers and the safeguards used is available in the privacy information of the respective provider, linked in this policy.
9. Your data protection rights
Subject to the conditions in the GDPR, you have the right to:
- obtain access to your personal data and information about its processing;
- have inaccurate personal data corrected and incomplete data completed;
- request deletion of your personal data;
- request restriction of processing; and
- receive data you provided in a structured, commonly used and machine-readable format, and request its transmission to another controller, where processing is automated and based on consent or a contract.
Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. I will then stop that processing unless I demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for legal claims.
Withdrawal of consent
You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
For website consent choices, use "Cookie settings" in the footer. You can also contact me at emilianbestandig@gmail.com.
Complaints
You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement.
10. Changes to this policy
I will update this policy when changes to the website, its services or the relevant processing make an update necessary. The date above identifies the latest revision.
