Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

2. Overview

This website is a static portfolio. It sets no cookies, uses no analytics or tracking tools, embeds no content from third-party servers and contains no contact form. Fonts, images and audio files are delivered from the same server as the website itself.

3. Hosting and server log files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the site, the hosting provider automatically processes information that your browser transmits, in so-called server log files:

• IP address
• date and time of the request
• requested page or file
• referrer URL
• browser type, browser version and operating system

This data is required to deliver the website and to keep it stable and secure. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in the technically error-free and secure operation of the website. The data is not combined with other data sources and is deleted as soon as it is no longer needed for these purposes. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

Netlify, Inc. is based in the United States and delivers this website through a worldwide content delivery network, so the data listed above may be processed outside the European Union, in particular in the USA. Such transfers are safeguarded by the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) that form part of the data processing agreement. Further information:netlify.com/privacy.

4. Contact by email

If you contact me by email, I process your email address and the content of your message in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR; my legitimate interest lies in responding to enquiries. Your data is deleted once your enquiry has been dealt with, unless statutory retention periods apply.

5. Your rights

Under the GDPR you have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

To exercise these rights, an email to info@tombartnik.com is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence or place of work.

6. Changes to this policy

I update this privacy policy whenever the website or the legal situation changes. Last updated: November 2026.