Privacy Policy

Last updated: 14 November 2026

This policy explains how personal data is processed when you visit fuerst.one or contact us. Visiting this website does not constitute consent to data processing.

Controller and contact

Alexander Fürst
Fuerst.one — Webdesign & E-Commerce, Alexander Fürst
Grombühlstraße 37
97080 Würzburg, Germany
alexander@fuerst.one

Hosting and technical access data

This website is hosted by Vercel Inc., USA. Delivering the website involves processing your IP address, the requested URL, request time, browser and operating-system information, and any referring URL sent by your browser. Technical access and error logs may be processed to keep the website available, diagnose faults and prevent abuse. The legal basis is our legitimate interest in secure and reliable website operation under Art. 6(1)(f) GDPR. These technical processes are separate from visitor analytics.

Public API requests are also limited using an IP-based request counter held temporarily in server memory. The counting window is one minute; expired entries are removed during periodic cleanup when further requests arrive or when the server instance ends. This protects the service against excessive requests under Art. 6(1)(f) GDPR.

Hosting may involve processing in the United States and other countries where Vercel and its subprocessors operate. Vercel describes its processing terms and international-transfer safeguards, including EU standard contractual clauses, in its Data Processing Addendum. Further information is available in Vercel’s privacy notice.

Cookies, analytics and browser storage

We do not use visitor analytics, advertising pixels, session replay or tracking cookies. The website does not set application cookies and does not create visitor profiles.

The Plasma playground remembers your selected visual source, size and contrast in your browser’s local storage so that your settings are available on your next visit. These settings are not sent to us and do not contain a visitor identifier. They remain until you clear this website’s data in your browser. This storage supports the playground settings you select; it is not used for tracking.

Camera, selected files and recordings

If you choose the camera feature in the Plasma playground, access requires your browser’s camera permission. No microphone access is requested. Camera images and image or video files you select are processed locally in your browser to generate the visual effect. They are not uploaded to our servers. Recordings are also created locally and can be downloaded to your device. You can stop the camera by switching to another source or leaving the playground, and revoke camera permission in your browser settings.

Website content, fonts and external links

We use Notion as a source for published profile and project content. Our server retrieves this content; your browser does not need to connect to Notion to read it. The IBM Plex Mono font is served by this website, without a browser request to Google Fonts.

Project images are normally served through this website. Where no project logo is available, a logo may be requested directly from logo.clearbit.com. Such a request discloses your IP address and the request information sent by your browser to the external provider. The purpose is to display project logos, based on our legitimate interest in presenting our work under Art. 6(1)(f) GDPR.

Links to GitHub, LinkedIn and freelance platforms are ordinary links, rather than embedded social plugins. If you follow a link, the destination provider processes data under its own privacy policy.

CV download form

The CV download form on the contact page requires an email address. When you submit it, your email address and the submission timestamp are sent through our server to a database at Notion Labs, Inc., USA. The PDF is then downloaded directly in your browser; it is not sent by email. We use the submitted details to keep a record of CV requests and handle related business enquiries. The legal basis is our legitimate interest in handling and documenting these requests under Art. 6(1)(f) GDPR; where an enquiry concerns a contract or steps before entering a contract, Art. 6(1)(b) GDPR applies. Entering an email is voluntary, but the form requires it before starting the download. Submitting the form does not subscribe you to a newsletter.

Notion and its subprocessors may process these data in the United States and other countries. Notion describes its international-transfer safeguards, including EU standard contractual clauses, in its privacy practices. CV request records are retained while needed to handle the request and related correspondence, subject to the retention criteria below. You can contact us to request their erasure or object to processing.

Contact enquiries

If you contact us by email or phone, we process the contact details and information you provide to respond to your enquiry. For enquiries relating to a contract or steps before entering a contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in answering correspondence under Art. 6(1)(f) GDPR. Email and telecommunications providers involved in delivering your message may also process it. Providing this information is voluntary, but we need a way to respond if you request a reply.

Retention

We retain personal data only for as long as needed for the purposes described here. Enquiries are deleted when they have been resolved and further retention is no longer necessary, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer storage. Technical hosting logs are subject to the hosting provider’s applicable retention settings and security requirements. Local playground settings can be deleted at any time in your browser.

Your rights

Subject to the applicable legal conditions, you have the right to access, rectification, erasure, restriction of processing and data portability under Arts. 15–20 GDPR. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation under Art. 21 GDPR. If processing is based on consent, you may withdraw it at any time with effect for the future. Contact us using the details above to exercise your rights. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

You may lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement. The authority responsible for private businesses in Bavaria is the Bavarian State Office for Data Protection Supervision (BayLDA).