Privacy policy

Who is responsible

Katja Jacobsen is the data controller for this website. You can reach me about anything in this policy at katjamaehleke98@gmail.com.

What I collect and why

The contact form

When you send a message, I receive:

• your name
• your email address
• your message, and anything you choose to include in it

I use this only to read and answer your message, and to keep track of our conversation, for example about a job or a project. Sending a message is voluntary; you can also email me directly instead.

The legal basis is my legitimate interest in answering people who contact me (GDPR art. 6(1)(f)). Where your message is about a possible job or collaboration, it is also steps taken at your request before entering into an agreement (art. 6(1)(b)).

Visiting the site

Like every website, the server that delivers these pages briefly records technical data such as your IP address, browser type and the time of the request. This is needed to deliver the site and keep it secure (art. 6(1)(f)). I do not use it to identify you.

Cookies and local storage

This site sets no cookies and uses no tracking or analytics tools, so there is nothing to accept. When you send the contact form, your browser stores the time of sending in its local storage. It contains no personal information and only exists to stop the form being sent repeatedly within a few seconds.

Who else processes your data

I use these services to run the site. They process data on my behalf and only to provide their service:

• Vercel Inc. privacy policy (opens in a new tab): Hosts the website. Its servers receive your IP address and browser details when you load a page.
• EmailJS privacy policy (opens in a new tab): Delivers the contact form: your name, email address and message pass through its service on the way to my inbox.
• Google (Gmail) privacy policy (opens in a new tab): My email provider, where contact form messages and replies are stored.

Some of these providers may process data outside the EU/EEA, including in the United States. Where that happens, the transfer relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as set out in each provider's data processing terms.

I never sell your data or share it with anyone else, unless the law requires me to.

How long I keep it

I keep contact form messages for as long as our conversation is ongoing, and delete them no later than 12 months after it ends. If something we agreed needs to be kept longer, for example for legal or accounting reasons, I keep only what is required for as long as it is required.

Server logs are kept by the hosting provider for a short period and then deleted automatically.

Your rights

Under the GDPR you have the right to:

• see the personal data I hold about you
• have incorrect data corrected
• have your data deleted
• have the processing of your data restricted
• object to the processing of your data
• receive your data in a portable format

To use any of these rights, email me at katjamaehleke98@gmail.com. I will reply within one month.

If you think I am handling your data unlawfully, you can complain to the Danish Data Protection Agency, Datatilsynet (opens in a new tab). I would appreciate the chance to sort it out with you first.

Changes

If the way I handle data changes, I will update this page and the date at the top. You can always find it from the footer of every page.