Clear about
your data.

The controller responsible for personal data processed in connection with this website is:

No data protection officer is appointed because this website is operated by an individual and no statutory appointment requirement applies.

This website is hosted using ChatGPT Sites, a service provided by OpenAI. Technical delivery and security infrastructure may also involve Cloudflare. When you access the site, the providers necessarily process connection and request data such as your IP address, requested URL, date and time, referrer where supplied, browser and device information, language settings, response status, and security or routing information.

This processing is necessary to deliver the website securely, maintain availability, prevent misuse and diagnose technical errors. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are reliable, secure and efficient operation of this public portfolio.

OpenAI processes end-user data as needed to provide and operate ChatGPT Sites under the agreement applicable to the site owner. ChatGPT Sites does not currently provide data residency. International processing may therefore occur under the safeguards contained in the applicable provider agreements. More information is available in the ChatGPT Sites data-protection guidance, the OpenAI Europe Privacy Policy and Cloudflare’s Privacy Policy.

I do not receive a visitor-level analytics dashboard from this site and do not use server data to build visitor profiles.

The email links on this website open your own email application. The website itself does not transmit your message. If you choose to send an email, I process the details you provide—typically your name, email address, organisation, message and any attachments—to respond to your enquiry and, where relevant, discuss an employment opportunity.

The legal basis is Article 6(1)(b) GDPR where the communication concerns steps toward a possible employment relationship, and otherwise Article 6(1)(f) GDPR. The legitimate interest is responding to genuine professional and recruitment enquiries.

I use the consumer Gmail service. Google may process email data under its own terms and privacy notice and does not offer a data-processing agreement for consumer Gmail. Please do not send sensitive or special-category personal data by unencrypted email. See Google’s Privacy Policy for details.

Messages are deleted when they are no longer required for the conversation or a related application process, unless legal claims or statutory retention duties require longer storage.

This portfolio does not intentionally use analytics, advertising pixels, embedded media, fingerprinting, optional cookies or browser-storage identifiers. No consent banner is shown because there are currently no non-essential technologies for you to accept or reject.

The hosting and security providers may use strictly necessary technical mechanisms to deliver and protect the site. If optional analytics, embeds or marketing technology are introduced later, this notice and the consent controls will be updated before those technologies are activated.

Personal data is disclosed only where necessary: to the hosting and security providers that deliver the site, to email providers involved when you contact me, to professional advisers where required to establish or defend legal claims, or to authorities where disclosure is required by law.

The website contains links to third-party sites, including LinkedIn and project websites. Merely viewing this portfolio does not contact those third parties through an embed. If you follow an external link, the destination provider’s privacy notice applies.

I retain personal data only for as long as it is needed for the purposes described above, then delete or anonymise it unless a legal obligation or the establishment, exercise or defence of legal claims requires longer retention. Technical-provider retention follows the agreements and policies applicable to their services.

Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time for the future. This site does not use automated decision-making or profiling.

To exercise a right, email meililwyss@gmail.com. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for private-sector controllers in Bavaria is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

This notice will be reviewed when the website, its providers or its data practices change. The date at the top identifies the current version.

For privacy questions, contact meililwyss@gmail.com.