Privacy notice
This portfolio does not add analytics, advertising pixels or social-media feeds. Images are hosted with the site and the page uses system fonts. This notice explains hosting, browser preferences, optional music players and email enquiries. Project animations run locally; this site does not record or transmit pointer or focus interactions.
Controller
Eugen SchottBirkenweg 40
94405 Landau an der Isar
Germany
haid.creative@gmail.com
Website delivery and security
This website is hosted on Cloudflare Workers (static assets), provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Requests transmit technical information such as your IP address, requested URL, time of access, browser information and connection metadata. This processing serves website delivery, reliability and protection against misuse. The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in providing a secure portfolio.
The portfolio adds no analytics SDK, advertising pixels or visitor accounts. Cloudflare processes delivery and security data under its service arrangements and may process data outside the EEA, including in the United States. Cloudflare’s privacy policy and Data Processing Addendum describe the provider’s processing, retention criteria and applicable transfer safeguards, including standard contractual clauses where used. Security features may use necessary cookies; information about these is linked below.
Appearance preference
If you choose light or dark mode, the setting is stored locally in your browser under eugen-schott-theme so that your requested appearance can be restored. It remains until you change it or clear the site’s browser storage. It is not sent to me and is not used for tracking. This functional storage serves the appearance you explicitly request (Section 25(2)(2) TDDDG); where personal data is involved, Article 6(1)(f) GDPR applies.
Embedded music
Spotify and Bandcamp players remain blocked until you allow the individual provider. Once allowed, its player loads directly when you open a music project. Playback begins when you press Play. Loading the player discloses your IP address, browser and device information and may involve cookies or similar storage for playback, measurement and personalisation. The legal basis for this optional loading is consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may decline without affecting access to the portfolio or its external listening links. Spotify AB and Bandcamp Ventures LLC describe their processing, possible account association, analytics, retention and international transfers in their privacy policies. Closing a project removes its player but does not delete data already received or stored by a provider. You can withdraw your permission at any time in Media settings; withdrawal stops future player loading and does not affect earlier lawful processing.
Remembering your media choices
The browser stores each provider’s allow/block choice, its timestamp and the notice version under eugen-schott-media. Choices expire after 180 days and are not sent to me or used to identify you. They are read only to honour your privacy choice, using Section 25(2)(2) TDDDG and, where relevant, Article 6(1)(f) GDPR. You can change them in Media settings or delete them by clearing the site’s browser storage. If local storage is unavailable, choices apply only while the page remains open.
Email enquiries
If you email me, I use your email address, message, any name and attachments you provide, and associated communication metadata to respond. The site has no contact form or newsletter subscription. Email is handled using Gmail (Google). For an enquiry about a contract, the legal basis is Article 6(1)(b) GDPR; for other correspondence it is Article 6(1)(f) GDPR, based on the interest in answering enquiries. Please provide only information needed for your request.
I retain correspondence while needed to handle the enquiry or resulting business relationship, then delete it unless legal retention duties or the establishment, exercise or defence of claims require further storage. Where a legal retention duty applies, Article 6(1)(c) GDPR is the basis. Email service providers process the messages as part of transmission and storage; Google’s privacy policy explains its own processing.
External links and international processing
Instagram, LinkedIn, music shops and other external services are ordinary links, not embedded social feeds. Following a link takes you to that provider. Hosting, email and music services may process data outside the EEA, including in the United States. Their privacy notices explain the applicable locations and transfer safeguards, such as adequacy decisions or standard contractual clauses, where used. A link to a provider’s policy does not replace your rights against me for processing for which I am responsible.
Your rights
Subject to the legal conditions, you may request access, correction, erasure, restriction of processing and data portability. You may withdraw consent at any time for the future without affecting the lawfulness of earlier processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Contact me at the email above to exercise these rights.
You may also complain to a supervisory authority, including the authority where you live or work. For private-sector controllers in Bavaria, this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany; see its complaint link below.
Providing enquiry details and using external music services are voluntary. Without contact details I may be unable to reply. This portfolio does not perform automated decisions or visitor profiling.
Last updated: 24 October 2026.