Privacy Notice
1. Controller
Leon Schmidt
Osloer Str. 116
13359 Berlin
Germany
E-mail: hello@leondp.com
2. General
This website is a portfolio. There is no registration, no login, no newsletter and no contact form. No analytics, tracking or advertising services are used and no own cookies are set. When you visit the website, personal data is only processed to the extent necessary for technical operation and for the embedded videos. Independently of the website, business contact data of companies is processed for the purpose of acquiring assignments, see section 6.
3. Hosting and server log files
The website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA and delivered through the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When a page is requested, these providers automatically process transmitted access data in server log files: IP address, date and time of access, page requested, volume of data transferred, referrer URL, browser type and operating system.
The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in providing the website in a secure, stable and performant way. Data is transferred to the USA on the basis of standard contractual clauses under Art. 46 (2) (c) GDPR; both providers are additionally certified under the EU-US Data Privacy Framework. Log files are deleted automatically after a short period and are not merged with other data.
4. Embedded videos from Vimeo
Videos from Vimeo are embedded on the project pages. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. When a project page is opened, the Vimeo player is loaded. In doing so, Vimeo receives the IP address, information about the device and browser used, and the information which page was opened. This also happens if you do not have a Vimeo account or are not logged in.
The player is embedded with the parameter dnt=1. Vimeo thereby refrains from setting tracking cookies and from evaluating viewing behaviour for analytics purposes. Technically necessary connection data is still processed.
The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in presenting my own work in appealing quality without operating a video infrastructure of my own. The transfer to the USA takes place on the basis of standard contractual clauses under Art. 46 (2) (c) GDPR. Details: https://vimeo.com/privacy
5. Contact by e-mail
If you contact me by e-mail, the information you provide is stored in order to process your enquiry and for possible follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual or contractual enquiries, otherwise Art. 6 (1) (f) GDPR. The data is deleted as soon as the enquiry has been dealt with conclusively and no statutory retention obligations prevent deletion.
6. Approaching exhibitors and business contacts
For the purpose of acquiring assignments, business contact data of companies is processed which originates from publicly accessible sources, in particular from exhibitor directories of trade fairs, from legal notices and from company websites. The data processed is: company name, address, hall and stand number, business e-mail address and, where published, the name and function of the contact person.
The purpose is a business approach with an offer that relates directly to the activity of the respective company. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in direct marketing towards companies, see recital 47 GDPR. The data is not passed on to third parties, not sold and not used for other purposes. There is no automated decision-making and no profiling.
Where this data is not collected from the data subject, this notice serves as the information required under Art. 14 GDPR. It is provided at the latest with the first message.
The data is deleted as soon as it is established that no business relationship will come about, at the latest twelve months after the first approach. If an objection to the approach is raised, the e-mail address is stored further for the sole purpose of preventing a renewed contact.
You may object to the processing at any time and without giving reasons, informally by e-mail to hello@leondp.com. After an objection there will be no further approach.
7. External links
The Instagram link opens a profile on Instagram (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) in a new tab. No data is transferred from this website to Instagram in the process; processing only begins after the click, on the target page. The privacy policy of Instagram applies there.
8. Encryption
The website is delivered exclusively over a TLS encrypted connection (https).
9. Rights of data subjects
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object at any time to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR). Requests go to hello@leondp.com.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, www.datenschutz-berlin.de
10. Status
August 2026. This notice will be adapted if the website or the legal situation changes.
