Privacy Policy

Controller

The controller responsible for this website under the General Data Protection Regulation (GDPR) is:

Jaqueline Messaggi
Email: jackiemessaggi@gmail.com
Postal address: see the Impressum

Hosting: GitHub Pages

This website is hosted on GitHub Pages, a service provided by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you visit a page, your browser connects to GitHub’s servers, which receive technical data such as your IP address, the requested page, the date and time of the request, and your browser’s user agent. According to GitHub, the IP address of every visitor to a GitHub Pages site is logged and stored for security purposes. I have no access to these logs.

Purpose and legal basis: providing this website reliably and securely. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in operating a functional and secure website.

Retention: GitHub does not publish a specific retention period for these logs. It states that it keeps personal data for as long as needed for the purpose for which it was collected and to meet legal obligations. More information: GitHub General Privacy Statement.

Cloudflare Web Analytics

I use Cloudflare Web Analytics, a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to understand how this portfolio is used, for example which pages are visited and how quickly they load.

How it works: when analytics is active, your browser loads a script from static.cloudflareinsights.com. The script reads the address of the page you are viewing, the referring page, your browser’s user agent, and page-load performance data, and sends this information to Cloudflare. As with any connection, Cloudflare also receives your IP address. The script does not set cookies and does not use your browser’s storage. According to Cloudflare, query strings in page addresses are not recorded.

Opting out: analytics is active by default. On your first visit, a notice informs you about it and lets you decline. You can change your choice at any time in Privacy settings, which is also available at the bottom of every page. If you decline, the script is no longer loaded on subsequent pages or visits in this browser, and any further data the script would send from the current page is discarded. Data transmitted before you declined cannot be withdrawn retroactively.

Purpose and legal basis: understanding how the portfolio is used in order to improve it. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in understanding how the website is used. You can object to this processing at any time by declining in Privacy settings (Art. 21 GDPR).

Retention: according to Cloudflare, analytics data is kept unsampled for 7 days and is then aggregated to about 10% of its original volume for long-term storage. The statistics are available to me for the previous six months. More information: Cloudflare Privacy Policy.

Your privacy preference

When you select “Decline” or “Got it”, or change your choice in Privacy settings, your choice is stored in your browser’s local storage under the key pos-analytics. It remains on your device and is not transmitted to me or to third parties. Storing it is necessary to remember the choice you made. You can delete it at any time by clearing this website’s data in your browser. If your browser blocks local storage, your choice applies only to the current page.

International data transfers

GitHub and Cloudflare are based in the United States, so personal data may be processed there. Both companies state in their privacy policies that they comply with the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. GitHub also relies on the European Commission’s Standard Contractual Clauses, and Cloudflare relies on them should its certification lapse. The current certification status of both companies can be checked on the official Data Privacy Framework List.

Contact by email

If you contact me by email, I process your email address and the content of your message to reply to you and to handle the conversation, for example regarding a job opportunity. My email account is provided by Google (Gmail), so your message is also processed by Google. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in responding to inquiries. Emails may be retained after a conversation or recruitment process has ended. Retention depends on the purpose of the correspondence and any applicable legal obligations.

Fonts, media, and external links

Fonts, images, and videos are served directly from this website. No third-party fonts, video players, or social media plugins are loaded.

My CV is available as a PDF hosted on this website. Opening or downloading it involves the same technical data processing as other files served by the website.

This website contains links to external websites, such as LinkedIn, GitHub, a photographer’s website, and, within the Snoof prototype, several plant and pet-safety resources. These websites are only contacted when you click a link. Their own privacy policies then apply.

Your rights

Under the GDPR, you have the right to:

• access the personal data I hold about you (Art. 15)
• have it corrected (Art. 16) or erased (Art. 17)
• restrict its processing (Art. 18)
• receive it in a portable format (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• lodge a complaint with a supervisory authority (Art. 77)

To exercise these rights, contact me at jackiemessaggi@gmail.com.

The supervisory authority responsible for me is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de

You may also contact the supervisory authority in the EU member state where you live or work.

Changes to this policy

I update this policy when changes to the website affect the processing of personal data. The date at the top shows the current version.