Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Nikita Petrich
Sonnenhamer Straße 17
86561 Aresing, Germany
Phone: +49 15679088678
E-mail: n.petrich@sequenz.io

This website is a static portfolio site with no login, no forms and no advertising networks. Fonts are served locally from this site; visiting it opens no connection to Google or any other font service. Personal data arises only within the narrow scope described below.

No tracking or advertising cookies are set. The only cookie set is a technically necessary one for your choice of language: when you switch between German and English in the top right, the site stores your choice under the name NEXT_LOCALE (value “de” or “en”, lifetime one year) so that a link opened later without a language prefix appears in your language. The cookie contains no identifier by which you could be recognised and is not passed on to third parties. It is strictly necessary for the function you explicitly requested (§ 25 (2) no. 2 TDDDG); the legal basis for the processing is Art. 6 (1) (f) GDPR.

Also strictly necessary, and therefore not subject to consent, are two entries in your browser's localStorage: your decision about usage measurement (see section 4) and your choice between the light and dark theme. Neither leaves your device.

This website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany; the server location is Nuremberg (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with netcup.

When this website is accessed, the web server automatically processes information transmitted by your browser (in particular IP address, date and time of access, page requested, referrer URL, browser type and preferred language). The preferred language is evaluated transiently only, to send you to the German or the English version on your first visit; it is not stored. These server log files serve exclusively to ensure trouble-free operation and the security of the website (legal basis: Art. 6 (1) (f) GDPR). The log data is deleted after 7 days at the latest and is not merged with other data sources.

This website measures its usage with a self-hosted instance of the open-source software Umami on a server in the EU. The measurement is deliberately data-minimising: no cookies are set and nothing is stored on or read from your device. Your IP address is processed transiently only, in order to derive the country and region of origin from it and to form a value that makes your visit distinguishable from others; that value is derived from the IP address, the browser identification and a random value that changes daily. The IP address itself is not stored, and because the random value changes every day, recognition across several days is impossible.

What is recorded are aggregated details such as page views, country and region of origin, browser, operating system, device type and screen resolution, the referring page, as well as events such as buttons clicked (e.g. CV download, appointment booking, switching language or theme), scroll depth and approximate time on page — with no link to you as a person. Search input is not recorded in plain text. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in measuring reach and improving the offering); § 25 TDDDG does not apply because your device is not accessed. Aggregated statistical data is deleted after 14 months at the latest.

You may object to this measurement at any time with effect for the future (Art. 21 GDPR): via the Privacy settingsin the footer of every page. Your decision is stored as a single entry in your browser's localStorage — that storage is strictly necessary to honour your choice (§ 25 (2) no. 2 TDDDG).

If you contact me by e-mail or telephone, I process the data transmitted in doing so (name, contact details, content of the enquiry) in order to handle the enquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract) or Art. 6 (1) (f) GDPR (answering general enquiries). The data is deleted as soon as it is no longer required for that purpose and no statutory retention obligations stand in the way.

For arranging an intro call, this website links to the external booking service Notion Calendar (calendar.notion.so) operated by Notion Labs, Inc., San Francisco, USA. Only once you follow that link and enter data there (e.g. name, e-mail address, preferred date) does Notion process that data under its own responsibility; a transfer to the USA may take place in the process. Notion Labs, Inc. is certified under the EU-US Data Privacy Framework. For details please see Notion's privacy policy. Using the booking link is voluntary; you can alternatively arrange appointments by e-mail or telephone.

In the “Testimonials” section I publish recommendations from clients and project colleagues, with name, position, company and the text of the quotation. These recommendations were given publicly by the respective individuals on LinkedIn or Malt and are reproduced here with their consent (legal basis: Art. 6 (1) (a) GDPR). Where a recommendation is not available in the language of the page you are viewing, a translation is additionally shown and marked as such; the authoritative text remains the original published at the linked source. Every referee may withdraw their consent at any time without formality (contact details in section 1); the entry is then removed from the website immediately.

Under the GDPR you have the following rights:

• access to the data processed (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR),
• withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

This privacy policy will be adjusted as soon as the data processing on this website changes. The version published here is the one that applies at any given time.