Legal
Privacy Policy
General information
This privacy policy explains how personal data is processed when you visit this website.
The website is the personal portfolio and personal brand website of Elias Appuhamy and is used to present his profile, projects, and journey as a web designer.
Use of the website is generally possible without actively entering personal data. However, when the website is accessed, technically necessary data is processed, especially through hosting and delivery of the website.
In addition to the GDPR, the German Federal Data Protection Act (BDSG) and Section 25 TDDDG may apply where relevant.
This website currently does not use analytics or tracking tools for marketing or profiling purposes.
Controller
Elias Appuhamy
represented by his legal guardian
Christina Appuhamy
Ackerstraße 31
40822 Mettmann
Germany
Email: elias@elyon-web.de
Hosting via Vercel
This website is hosted and delivered via Vercel.
Provider: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States.
When the website is accessed, technically necessary data may be processed through Vercel's infrastructure, including IP address, time of access, requested URL, referrer URL, browser type, operating system, status codes, and connection-related information.
Processing takes place for the purpose of secure, stable, and performant delivery of the website.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the website.
Vercel uses a globally distributed infrastructure including CDN and edge technologies. Processing of personal data outside the European Union, especially in the United States, cannot be ruled out.
According to Vercel's published information, international data transfers may be based on appropriate safeguards such as standard contractual clauses. Vercel also refers to its Data Privacy Framework certification.
Further information: https://vercel.com/legal/privacy-policy
Data Processing Addendum: https://vercel.com/legal/dpa
Access data and server log files
When you visit this website, technical access data is processed automatically.
This may include IP address, date and time of access, requested page or file, amount of data transferred, HTTP status code, referrer URL, browser type and version, operating system, and, where applicable, the hostname of the accessing device.
This data is technically required to deliver the website, ensure stability, detect misuse, and maintain system security.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and error-free provision of the website.
Cookies and similar technologies
At the current stage, this website does not use cookies or similar technologies for analytics, tracking, or marketing purposes.
If technically necessary storage or access to information on your device is required in individual cases, this is based on Section 25(2) no. 2 TDDDG because it is strictly necessary to provide the digital service you expressly requested.
Where personal data is processed in that context, the legal basis is Art. 6(1)(f) GDPR.
Contact form
A contact form is provided on this website. If it is actively connected in production, the data you enter, especially your name, email address, and message, will be processed to handle your request.
The form is technically prepared for Formspree. If Formspree is activated, the submitted data will be transmitted to Formspree and processed there for message handling.
Depending on the specific setup, technical metadata such as IP address, timestamp, referrer data, and security-related information for spam prevention may also be processed.
Processing takes place for the purpose of handling your message and communicating with you.
The legal basis is Art. 6(1)(f) GDPR. If the request is aimed at initiating a contractual relationship, the additional legal basis is Art. 6(1)(b) GDPR.
Further information: https://formspree.io/security/
External icon requests (Iconify)
The website uses the library @iconify/react to display icons.
According to the library documentation, icon data can be loaded on demand via the public Iconify API.
This may result in a connection between your browser and Iconify servers. In that context, your IP address, browser information, the time of access, and the requested icon resource may be processed.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in a consistent and functional user interface.
Further information: https://iconify.design/
Fonts
This website uses the font Poppins via next/font/google within the Next.js framework.
According to the current implementation, the font files are fetched during the build process and then delivered locally with the website.
When users visit the deployed website, the browser does not directly load the font files from Google servers.
Based on the current implementation, no separate transfer of personal data to Google takes place solely for the display of the font on the live website.
Rights of data subjects
You have the rights provided by law, in particular the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to data portability under Art. 20 GDPR, and the right to object under Art. 21 GDPR.
To exercise these rights, you can contact the controller at any time.
Withdrawal of consent
If the processing of personal data is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful.
The competent supervisory authority in North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany.
Phone: +49 (0)211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de/