Privacy
Privacy
Privacy policy in accordance with GDPR and TDDDG.
Controller
Ivan Nychyporuk
Zurmaiener Strasse 128
54292 Trier
Germany
Email: nychyporuk.ivan.vfx@gmail.com
1. Overview
This website is a personal portfolio and consultant presentation. The protection of your personal data is important to me. This policy explains what data is collected, how it is used, and your rights under the GDPR.
This website uses no cookies, no tracking, and no analytics tools. No user profiles are created and no data is shared with advertising networks.
2. Hosting (Vercel)
This website is hosted by Vercel Inc., 340 Pine Street, Suite 900, San Francisco, CA 94104, USA. When you visit this website, Vercel automatically processes server log data including IP addresses, browser type, pages accessed, and timestamps. This data is technically necessary for operating the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation). Vercel acts as a data processor under a Data Processing Agreement. Data transfers to the USA are covered by the EU–US Data Privacy Framework.
More information: vercel.com/legal/privacy-policy
3. Contact Form
When you submit the contact form, your name, email address, and message are collected and forwarded to my inbox via Resend (Resend Inc., USA). This data is used solely to respond to your inquiry and is not shared with third parties.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in processing incoming inquiries) or Art. 6(1)(b) GDPR where the inquiry relates to pre-contractual steps. Contact inquiries are deleted once the communication has concluded, and in any case within 12 months, unless statutory retention obligations apply.
4. AI Assistant
The AI Assistant section embeds a chatbot application powered by Google Gemini (Google LLC, USA). On first visit a consent dialog is shown. The Google Gemini API is contacted only after you give explicit consent. When you use the chatbot, your inputs are processed by Google's AI services. I do not store chatbot conversations myself.
Please refer to Google's Privacy Policy: policies.google.com/privacy
4a. Browser Storage (AI Assistant)
The AI Assistant uses your browser's localStorage exclusively to store:
- ivan_consent: Records that you have given consent. Prevents the consent dialog from reappearing on subsequent visits.
- ivan_profile: Optional — stores a customised candidate profile if the Admin Panel has been used.
This data is stored only in your own browser and is never transmitted to any server by this website. It persists until you clear your browser data or delete it via the Privacy Menu (trash icon in the chat interface).
Legal basis: Art. 6(1)(a) GDPR (your explicit consent given via the consent dialog). TDDDG §25 — storage on the device is limited to what is strictly necessary to provide the explicitly requested service.
5. Your Rights (GDPR Art. 15–22)
You have the right to:
- Access the personal data held about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure of your data – "right to be forgotten" (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Lodge a complaint with a supervisory authority (Art. 77)
How to exercise your rights: Send an email to nychyporuk.ivan.vfx@gmail.com. The only personal data this website may hold about you is the content of a contact form submission (your name, email, and message). Upon a verified request, I will confirm what data I hold and/or delete it from my inbox within 30 days. Server log data (IP addresses) is processed and automatically rotated by Vercel — contact Vercel directly for log-level requests.
Supervisory Authority
The competent supervisory authority for Rhineland-Palatinate is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34, 55116 Mainz
www.datenschutz.rlp.de
6. Legal Bases Summary
- Hosting / server logs: Art. 6(1)(f) GDPR
- Contact form: Art. 6(1)(f) or Art. 6(1)(b) GDPR
- AI Assistant / browser storage: Art. 6(1)(a) GDPR (consent), TDDDG §25
7. Changes to this Policy
This policy may be updated as the website evolves. The current version is always available at this URL.