Privacy

In short: this website sets no tracking cookies and loads no third-party content. For anonymous visitor statistics I use Vercel Web Analytics, also without cookies. I only process personal data as far as running the site requires and when you write to me through the contact form.

1. Controller

Mihnea Cojocaru
Christian-Lassen-Straße 9
53117 Bonn, Germany
Email:

2. Hosting and server logs

The website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) on servers in Frankfurt am Main. When a page is requested, Vercel processes technically necessary data: IP address, date and time, requested address, referrer and browser identifier. This is needed to deliver the page and protect it against abuse (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Vercel. Where data reaches the USA, Vercel is certified under the EU-US Data Privacy Framework.

3. Visitor statistics

To see which pages are read, I use Vercel Web Analytics. When a page is requested, the page address, the referring page (referrer), the country, and the browser, operating system and device type are recorded. No cookies are set and nothing is stored on your device. Visitors are counted using an anonymous value that is derived from the request and discarded after 24 hours; IP addresses are not stored. This means I cannot recognise anyone or follow them across several days or websites. I only see aggregated numbers. The legal basis is my legitimate interest in improving the website (Art. 6 (1) (f) GDPR).

4. Database and images

The website's content and messages from the contact form are stored in a database at Neon Inc. in the Frankfurt region. Images are kept in Vercel's storage (Vercel Blob) and delivered through this website. Both providers process the data on my behalf.

5. Contact form and email

When you write to me, I store your name, email address, topic and message in order to reply (Art. 6 (1) (b) and (f) GDPR). I am notified of new messages by email; Resend (Plus Five Five, Inc., USA) sends these through servers in the EU. The message therefore also reaches my mailbox. I do not share the data. Messages in the database are deleted automatically after six months; I delete emails once the request is settled.

To prevent spam, your browser solves a small computing task before sending (ALTCHA). It runs entirely on this server, without third parties and without cookies. So that nobody can flood the form, your IP address is held briefly in the server's memory and counted for at most ten minutes, but not stored.

6. Cookies and local storage

If you choose a language yourself, a cookie (“locale”) remembers this choice for one year so the site opens in your language next time. This is technically necessary to carry out your request (§ 25 (2) no. 2 TDDDG). There are no other cookies.

Whether you chose dark mode or closed the language suggestion is remembered by your browser in its local storage. These settings never leave your device. Fonts are served from this server, not from external services.

7. External links

Links to LinkedIn or other sites lead to third-party services. Their privacy policies only apply once you click them.

8. Your rights

• Access to stored data (Art. 15 GDPR)
• Rectification and erasure (Art. 16 and 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Complaint to a supervisory authority, e.g. the data protection commissioner of North Rhine-Westphalia

Last updated: October 2026