1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Moritz Land
Lisbon
Portugal

E-mail: contact@moritz-land.com
Website: https://moritzland.webflow.io/

2. General information on data processing

I take the protection of your personal data very seriously. I process personal data of visitors to this website only to the extent necessary to provide a functional website, my content and services, and to respond to enquiries, and always in accordance with the GDPR.

The processing of personal data takes place on the basis of a legal permission (in particular Art. 6(1) GDPR), for performance of a contract, based on legitimate interests, or on the basis of your consent.

3. Hosting and provision of the website (Webflow)

This website is hosted via the service Webflow provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Webflow provides the technical platform for building, hosting, and delivering the website and processes personal data as a processor on my behalf.

A data processing agreement (Data Processing Addendum, DPA) including the EU Standard Contractual Clauses and regulations on international data transfers has been concluded between me and Webflow. Webflow also participates in the EU–US Data Privacy Framework (DPF), which is recognised as an adequate transfer mechanism by the European Commission.

The legal basis for hosting is my legitimate interest in the secure and efficient provision of this website (Art. 6(1)(f) GDPR).

For more information, please see Webflow’s privacy documentation:
https://webflow.com/legal/privacy

4. Server log files

When you access this website, Webflow automatically collects and stores information in so-called server log files, which your browser automatically transmits. This may include:

• IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transferred

• Website from which the request originates (referrer URL)

• Browser type, operating system and interface, language and version of the browser software

These data are generally not attributed to specific individuals and are not merged with other data sources. They are processed for the purposes of ensuring the technical functionality, security and optimisation of the website.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable provision of the website).

5. Contact (contact form / e-mail)

This website provides a contact form that you can use to send me enquiries. The following data are typically processed:

• Name

• E-mail address

• Content of your message

• Any other information you voluntarily provide

When you submit the form, the contents are transmitted and technically processed by Webflow in order to deliver them to me. Alternatively, you can contact me by e-mail; in this case I will process the personal data transmitted with the e-mail.

These data are used exclusively to process your enquiry and any follow-up questions.

The legal basis for this processing is Art. 6(1)(b) GDPR, where your enquiry relates to the performance or initiation of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

I will delete your enquiry once it has been fully processed and no statutory retention obligations apply.

6. Cookies and similar technologies

This website is currently used primarily as a portfolio and information site. If cookies or similar technologies (e.g. for analytics or embedded content) are used in the course of operating this site, you will be informed about this and – where required – your consent will be obtained via an appropriate consent tool.

Cookies that are strictly necessary for the technical operation of the website (for example for basic functionality, security or form use) may be used on the basis of Art. 6(1)(f) GDPR (legitimate interest in providing a functional online offer).

If non-essential cookies (e.g. for statistics or marketing) are used, this is done solely on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

(If you use a specific cookie/consent tool or analytics service, this section should be expanded with the tool’s name, purposes, storage durations and how to withdraw consent.)

7. Analytics and statistics services (optional)

If I decide to use a web analytics service (such as Google Analytics, Plausible, Simple Analytics, etc.) in the future, this will only be done to evaluate the use of the website and to improve my offer.

In that case:

• the tools will be named,

• the categories of data (e.g. IP address, usage data) will be described,

• the legal basis (typically consent under Art. 6(1)(a) GDPR) will be indicated, and

• any data transfers to third countries (e.g. USA) and the safeguards used (DPF, SCCs) will be explained.

Currently, no specific analytics tool is named here; if such a service is introduced, this privacy notice will be updated accordingly.

8. Embedded content and third-party services

If embedded content from third-party providers (e.g. YouTube videos, Vimeo, SoundCloud, map services or other widgets) is integrated on this website in the future, those providers may collect IP addresses and other technical data in order to deliver the content.

In that case, the relevant services, data categories, legal bases and any data transfers to third countries will be described in this privacy notice. Where required, your consent will be obtained via a consent tool before loading such content.

9. Legal bases for processing

Unless a more specific legal basis is mentioned in this privacy policy, personal data are processed on the basis of the following provisions:

• Art. 6(1)(a) GDPR (consent)

• Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract)

• Art. 6(1)(c) GDPR (legal obligation)
• Art. 6(1)(f) GDPR (legitimate interests), in particular:
  • operation and security of this website
  • responding to enquiries
  • presentation of my services as a designer and developer

10. Storage period

I store personal data only for as long as is necessary for the respective purposes, or as long as I am obliged to store them under statutory retention obligations. Once the purpose ceases to apply or these periods expire, the data are routinely deleted or anonymised.

11. Data sharing / recipients

Personal data are only transferred to third parties if:

• this is necessary for the performance of a contract,

• I am legally obliged to do so,

• you have given your consent, or

• there is a legitimate interest within the meaning of Art. 6(1)(f) GDPR and no overriding interests of the data subject oppose the transfer.

Recipients may in particular be technical service providers and processors, especially Webflow as the hosting provider. Appropriate data processing agreements pursuant to Art. 28 GDPR have been concluded with all processors.

12. International data transfers

Because Webflow is based in the USA, personal data may be transferred to and processed in the United States.

Webflow participates in the EU–US Data Privacy Framework and additionally uses the EU Standard Contractual Clauses, thereby ensuring a level of protection for personal data that is essentially equivalent to that in the EU.

For further information, please refer to Webflow’s EU Privacy Policy and Data Processing Addendum:
https://webflow.com/legal/eu-privacy-policy
https://webflow.com/legal/dpa

13. Your rights as a data subject

Under the GDPR, you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object to certain processing operations (Art. 21 GDPR)

• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

You may exercise these rights at any time by contacting me using the contact details above. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

14. Data security

I take appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure, alteration or destruction. Transmission between your browser and the server is encrypted using TLS/SSL, as provided by Webflow for hosted websites.

15. Updates to this privacy policy

This privacy policy will be updated whenever changes are made to data processing, the services used, or legal requirements. The most current version is always available on this website.

‍