Privacy notice

The website is intended for GitHub Pages under weislens.tech. The hosting provider is GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. The domain was obtained through the GitHub Student Developer Pack; its registrar is a separate company, described below.

When GitHub Pages serves a page, GitHub logs the visitor's IP address for security, including visits without a GitHub login. Delivering website files also involves technical request information. Our purpose is to provide the course website reliably and securely, based on our legitimate interest under Article 6(1)(f) GDPR.

The public registration record for weislens.tech names InterNetX GmbH, Johanna-Dachs-Str. 55, 93055 Regensburg, Germany, as the registrar. Domain registration manages the domain name and the holder's registration information; the registrar is not the website host. Its privacy notice explains that processing.

We use the DNS service included with the domain. Its authoritative nameservers use ClouDNS infrastructure, identified by public DNS and IP registration records. DNS resolves the domain so the site can be reached. Lookup information can include the requested domain and the querying resolver's address. Our purpose is reliable website access, based on Article 6(1)(f) GDPR. We have not configured an additional reverse proxy or CDN in front of GitHub Pages.

Montserrat fonts, the logo, team portraits, styles and browser scripts are served with the website. Montserrat is downloaded during the build, not from Google Fonts when you visit. Next.js, React, Framer Motion, Radix UI and Lucide are bundled locally. Loading them does not itself connect your browser to their authors' servers.

The website has no analytics, advertising trackers, social-media widgets, embedded videos or maps, external image CDN, contact form or account registration. Ordinary outbound links connect to another website only when followed; that website's privacy information then applies.

The application does not set cookies or write preferences to localStorage or sessionStorage. Language is part of the page address. Navigation and portrait controls use temporary in-memory state. Your browser may cache website files as part of normal delivery. No analytics or advertising consent mechanism is currently used.

The email link opens your chosen email application. It does not send a message automatically. If you send an enquiry, we receive your email address, message, any name or attachments you provide, and delivery metadata. We use these to answer and manage your enquiry, based on our legitimate interest in project communication under Article 6(1)(f) GDPR. Providing these details is voluntary, but without a reply address we cannot answer by email.

The published contact uses Gmail. Google processes email content and delivery information to provide that mailbox; your own email provider also participates in delivery. Visiting this website alone does not send data to Gmail. Google's privacy notice describes its handling of email and international transfers.

The Team section displays member names, fictional project roles and edited portraits to present the course team. These personal data are publicly accessible. The team has confirmed that all ten members approved publication and portrait editing. Publication relies on consent under Article 6(1)(a) GDPR. Members can contact the project contact to request corrections or withdraw consent for future publication.

The supplied portraits were processed with an OpenAI image-editing service to adjust framing, backgrounds and lighting, using a personal ChatGPT account. The team has confirmed member approval for this preparation step. It is separate from visiting the website: visitors do not connect to OpenAI, and the final images are served locally. OpenAI receives the supplied photos and editing instructions for this processing.

For the personal account, OpenAI's Europe privacy policy and account data controls govern content use and retention. Content may be used to improve models depending on those controls. Retention depends on service needs, settings, security and law. The account holder can manage stored activity and request deletion. Project working copies are retained only while needed for preparation or necessary consent/rights records. Contact the project contact about removal requests.

For the EEA personal account, the provider identifies OpenAI Ireland Limited as controller. Portrait data may also be processed in the United States and other countries outside the EEA. OpenAI's Europe privacy policy describes adequacy decisions and standard contractual clauses. Copies of applicable transfer safeguards can be requested at privacy@openai.com.

Hosting requests are received by the hosting provider. Email enquiries are received by the responsible project contact and the email providers involved. OpenAI received the supplied portraits for editing. Team profiles are visible to website visitors. We do not sell personal data, create visitor profiles or use automated decisions with legal or similarly significant effects.

GitHub, Google and OpenAI may process data outside the European Economic Area, including in the United States. GitHub describes standard contractual clauses and the EU-US Data Privacy Framework in its privacy notice. Google describes adequacy decisions and standard contractual clauses in its transfer information. OpenAI's portrait-processing arrangements are described above. ClouDNS also describes safeguards for transfers outside the EEA. The linked provider notices explain these arrangements and how to obtain further information.

The application has no visitor database. GitHub determines hosting-log retention according to its service, security and legal purposes. ClouDNS retains operational information while needed for service reliability, troubleshooting, security or legal requirements. These provider-controlled records are separate from the team's enquiry emails; we do not promise a fixed deletion period for records outside our control.

We delete enquiry emails and their attachments within 30 days after the enquiry has been resolved. If a specific legal obligation or an ongoing legal claim requires longer storage, only the necessary information is retained for that purpose and deleted when the reason ends. The mailbox owner carries out this deletion; the website does not automatically delete email. Provider backups and security records follow the provider's own retention rules.

Team profiles are kept while needed to present the course project. We review that need at course completion and remove profiles when that purpose ends. If a member withdraws publication consent, we stop future publication and remove the profile from the current website promptly. Publicly available material may have been copied by others or indexed by search engines; a withdrawal does not automatically erase those third-party copies. Contact us so we can assess any further deletion measures within our responsibility.

Under the applicable conditions, you can request access, rectification, erasure, restriction and data portability under Articles 15 to 20 GDPR. Where processing relies on legitimate interests, you can object under Article 21 for reasons relating to your situation. Where consent is the basis, you can withdraw it for the future without affecting earlier lawful processing. Contact the project contact above to exercise your rights.

You may lodge a complaint with a data protection supervisory authority under Article 77 GDPR, especially in the country of your habitual residence, workplace or the alleged infringement. For a project operated in Chemnitz, the Saxon Data Protection and Transparency Commissioner is a relevant contact. You do not have to contact us first.