Privacy Policy

1. Controller

2. Hosting and delivery through Cloudflare

This website is hosted and delivered through Cloudflare Pages. The archived storefront file is stored in Cloudflare R2. The service provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA.

When you access the website, technically necessary request data may be processed, including your IP address, date and time of access, requested URL, referrer URL, browser and operating-system information, and other connection or security data. The purposes are to deliver the website, maintain availability, prevent abuse and attacks, and troubleshoot technical errors.

The legal basis is Article 6(1)(f) GDPR. My legitimate interests are the secure, reliable and efficient operation of this portfolio. Data is retained only for as long as necessary for delivery, security and troubleshooting, subject to Cloudflare's contractual and legal retention obligations.

Cloudflare operates a global network and may process data in the European Economic Area and the United States. Transfers to the United States are safeguarded through Cloudflare's certification under the EU–U.S. Data Privacy Framework and, where required, the European Commission's Standard Contractual Clauses.

Further information is available in Cloudflare's Privacy Policy and Data Processing Addendum.

3. Interactive storefront archive

The project page includes an interactive archive of the former “Mein Malen nach Zahlen” storefront. The ReplayWeb.page user interface and service worker are served directly from lennartbraun.com. The WACZ archive itself is retrieved from Cloudflare R2 only when the archive is opened.

To reconstruct and navigate the archived website, the viewer may use technically necessary browser storage and a service worker. This functionality is not used for advertising, profiling or analytics. The legal bases are Article 6(1)(f) GDPR and Section 25(2) no. 2 TDDDG, because the storage and access are necessary to provide the archive expressly requested by the user.

If the embedded archive cannot be loaded, you may choose to open it on replayweb.page. Only after activating that external link does your browser connect to ReplayWeb.page, whose own privacy terms then apply.

4. Contact by email

If you contact me by email, I process the information you provide, your email address and the associated communication metadata to respond to your message. For enquiries relating to a potential contract, role or collaboration, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is responding to the communication.

The data is deleted once the enquiry has been resolved and no legal retention obligation or legitimate reason for continued storage remains.

5. External links and social profiles

This website contains ordinary links to LinkedIn and Instagram. No content, tracking pixel or social-media plugin from these services is embedded. No connection to the respective provider is made merely by loading this website. If you click a link, you leave this website and the privacy terms of the external provider apply.

6. Cookies and analytics

This website does not use Cloudflare Web Analytics, Google Analytics, advertising pixels or other audience-measurement tools. It does not set non-essential marketing or analytics cookies. Accordingly, no consent banner is used. The technically necessary storage associated with the storefront archive is described above.

7. Your rights

Subject to the statutory requirements, you have the right to:

• request access to your personal data under Article 15 GDPR;
• request rectification under Article 16 GDPR;
• request erasure under Article 17 GDPR;
• request restriction of processing under Article 18 GDPR;
• receive data in a portable format under Article 20 GDPR; and
• object to processing based on Article 6(1)(f) GDPR under Article 21 GDPR.

To exercise these rights, contact lennart@lennartbraun.com. You also have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for Lower Saxony is Der Landesbeauftragte für den Datenschutz Niedersachsen.

8. Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place on this website.

9. Changes to this policy

This policy may be updated if the website, its service providers or the legal requirements change. The version published on this page is the current version.