Privacy Policy

Last updated: May 2026

1. General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified.

2. Controller

The controller responsible for data processing on this website is:

Matilde Cánepa González
Giesensdorfer Str. 32
12207 Berlin
Germany
E-mail: matildecanepagonzalez@gmail.com

3. Data Collection on This Website

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to the site operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address line changing from "http://" to "https://" and by the lock symbol in your browser.

Server Log Files

The hosting provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include:

This data is not merged with other data sources. The processing of this data is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and secure operation of this website.

Hosting and Content Delivery Network (CDN)

Our website is provided and delivered via external service providers. The personal data collected when you visit this website (specifically IP addresses, technical metadata, and log files) are processed on the servers of the providers listed below.

The use of these services is based on our legitimate interest in a secure, fast, stable, and efficient provision of our online services by professional providers (Art. 6(1)(f) GDPR).

GitHub Pages (Hosting)

We host the source code and content of our website using the GitHub Pages service. The provider is GitHub, Inc., 88 Colin P. Kelly Jr. St, San Francisco, CA 94107, USA (hereinafter "GitHub").

When you access our website, GitHub collects server log files in order to technically enable the provision of the service, ensure stability, and prevent misuse. We do not have direct access to this raw data. Data transfer to the USA is secured by GitHub's certification (or that of its parent company Microsoft) under the EU-US Data Privacy Framework as well as through Standard Contractual Clauses (SCC).

For further information, please refer to GitHub's privacy policy at:  https://docs.github.com/site-policy/privacy-policies/github-privacy-statement.

Cloudflare (Content Delivery Network & Security)

To optimize loading speed and secure our website, we use the Content Delivery Network (CDN) and security services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter "Cloudflare").

Through this service, web traffic between your browser and our website is routed through Cloudflare's global server network. Cloudflare analyzes this traffic on our behalf to prevent malicious access (e.g., DDoS attacks) and to speed up the delivery of page content. Access data (including your IP address) is processed during this workflow.

Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. In addition, the EU Commission's Standard Contractual Clauses are used to guarantee an appropriate level of data protection.

Further details regarding data processing can be found in Cloudflare's privacy policy at:  https://www.cloudflare.com/privacypolicy/.

Contact by E-mail or Contact Form

If you send us inquiries via e-mail or contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR). The data you send to us will remain with us until the purpose for storing the data no longer applies, you request us to delete it, or statutory retention obligations prevent deletion.

Formspree (Contact Form Processing)

The contact form on this website is processed using the form submission service provided by Formspree, Inc., 2261 Market Street #4990, San Francisco, CA 94114, USA (hereinafter "Formspree").

When you submit the contact form, the data you enter (name, e-mail address, subject, and message) is transmitted to and temporarily stored on Formspree's servers in order to forward your message to us. Formspree does not use this data for its own purposes beyond the technical processing of form submissions.

Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses (SCC), which provide an appropriate level of data protection for transfers to third countries.

For further information, please refer to Formspree's privacy policy at: https://formspree.io/legal/privacy-policy/.

4. Your Rights

You have the right at any time to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction, deletion, restriction of processing, and data portability. In addition, you have the right to object to the processing of your personal data.

In detail, you have the following rights:

You also have the right to lodge a complaint with a data protection | supervisory authority. As a rule, this is the supervisory authority of your habitual residence, place of work, or the place of the alleged infringement.

5. Analysis Tools and Third-Party Tools

This website currently does not use tracking cookies or external analytics or marketing tools such as Google Analytics. If this changes, this Privacy Policy will be updated accordingly.

6. Storage Duration

Unless a more specific storage period has been stated in this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies. If statutory retention obligations apply, the relevant data will be stored for the duration of the statutory retention period and then deleted.