Privacy Policy

Privacy Notice

Last updated: 16.07.2026

This notice fulfills the information obligations under Article 13 GDPR.

1. Controller

The controller responsible for data processing on this website is:

2. Nature and Scope of Processing

This project was created as a learning and portfolio project. Personal data is processed only to the extent required for the technical operation of the application, especially during registration, login, and use of the provided functions.

3. Note on Project Origin

The backend part of this project was developed independently. The frontend used in this project was provided by Developer Akademie and used or adapted for this project.

This website is used exclusively for portfolio presentation. No products are sold and no paid services are provided.

4. Categories of Processed Data

Depending on use, the following data may be processed in particular: email address, access data (password stored only as a hash in the backend), technical log data, account data, and additional content that users actively enter in the application.

5. Purposes and Legal Bases

Processing is carried out to provide the website and API, manage users, ensure IT security, and support error analysis and system stability.

Legal bases may include in particular: Article 6(1)(b) GDPR (contractual or pre-contractual use), Article 6(1)(f) GDPR (legitimate interest in secure operation), and, where applicable, Article 6(1)(c) GDPR.

6. Hosting and Server Logs

When this website is accessed, technically required connection data is processed, such as IP address, access time, requested resource, and browser information. This processing is required for secure and stable operation.

7. Cookies and Authentication

Technically necessary cookies may be used for authentication (for example, HttpOnly security cookies for login sessions). These cookies are required for secure operation of the application and are not used for advertising purposes.

8. Recipients and Data Processing by Service Providers

Data is disclosed to third parties only where legally permitted or technically required. Where external service providers are used, processing is carried out on the basis of data processing agreements pursuant to Article 28 GDPR.

9. Storage Duration

Personal data is deleted as soon as the respective purpose no longer applies and no legal retention obligations prevent deletion.

10. Your Rights

Within the applicable legal framework, data subjects have the following rights in particular: access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), objection (Article 21 GDPR), and the right to lodge a complaint with a supervisory authority.

11. Data Security

Appropriate technical and organizational measures are implemented to protect personal data against loss, manipulation, and unauthorized access.

12. Test and Learning Data

In demo and learning environments, only test data should be used. It is recommended not to use sensitive real data in public portfolio deployments.

13. Updates to This Privacy Notice

This privacy notice may be updated if technical or legal conditions change. The version published on this page applies.