Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Luis Dille
Robert-Bosch-Str. 24
64293 Darmstadt
Germany
Email: hi@luisdille.me

2. The short version

This website is a purely static portfolio. I use no tracking, no analytics, no advertising and no cookies. There are no contact forms, no user accounts and no embedded third-party content. Fonts and images are loaded directly from this website, not from external servers.

Personal data is processed in only two cases: technically, by the hosting provider when you visit the site (section 3), and when you send me an email (section 4).

3. Hosting by Netlify

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA (“Netlify”). Netlify delivers the site through a global content delivery network (CDN).

Every time you access the website, Netlify automatically processes data that your browser sends and stores it in server log files:

  • IP address of the requesting device
  • date and time of the request
  • requested page or file
  • referrer URL (the previously visited page, if sent)
  • browser and operating system used (user agent)
  • HTTP status code and amount of data transferred

Purpose: delivering the website, ensuring its stability and security, and preventing attacks and abuse.

Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest is providing the website securely and reliably.

Retention: Netlify stores the log data only for as long as necessary for these purposes and deletes it afterwards. I do not analyse this data myself or combine it with other data.

Data processing agreement: Netlify processes the data on my behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify.

Transfer to the USA: Netlify is based in the USA, and data may be processed there. Netlify is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, Netlify relies on the European Commission’s standard contractual clauses (Art. 46 (2) (c) GDPR).

For more information, see Netlify’s privacy policy: https://www.netlify.com/privacy/

4. Contact by email

If you send me an email, I process the information it contains (e.g. your name, email address and the content of your message) in order to answer your request.

Legal basis: Art. 6 (1) (b) GDPR if your request relates to a contract or pre-contractual steps (e.g. a project inquiry), otherwise Art. 6 (1) (f) GDPR. My legitimate interest is answering your message.

Retention: I delete your data once your request has been fully dealt with, unless statutory retention obligations (e.g. under commercial or tax law) apply.

5. Cookies and local storage

This website does not set cookies and does not store any data on your device (e.g. in local storage). That is also why there is no cookie banner.

This website contains links to other websites, e.g. LinkedIn, Instagram and X, as well as to projects and employers. These are plain links, not embedded content: no data is sent to these providers when you visit this website. Only when you click a link do you visit the provider’s site, and the respective provider is responsible for any processing there.

7. Your rights

Within the limits of the law, you have the right at any time to:

  • access the data I hold about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)

To exercise your rights, a simple message to hi@luisdille.me is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, https://datenschutz.hessen.de.

8. Encryption

This website is delivered exclusively over an encrypted connection (HTTPS/TLS), so data transferred between your browser and the server cannot be read by third parties.

9. Changes

I update this privacy policy when the website or the legal requirements change. The version published here applies.

Last updated: November 2026

This English version is provided for convenience. The German version is legally binding.