Privacy Policy

Roman Grosz, represented by his parents and legal guardians Aleksander Grosz and Katja Grosz, is responsible for this website. The postal address is listed in the Legal Notice (Impressum). You can reach me at contact@romangrosz.com.

Loading this website transmits your IP address and technical request information to the host, including the requested URL, time of access and browser information. This is needed to deliver the files and protect the service. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in providing a reliable and secure personal website.

The website is hosted on Cloudflare Pages, and requests to romangrosz.com pass through Cloudflare's network, which delivers the files and protects the website against attacks. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes this data on my behalf under its Data Processing Addendum, which is part of the contract with Cloudflare.

Cloudflare operates a global network, so processing may take place outside the European Economic Area, including in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR); standard contractual clauses apply in addition.

Cloudflare keeps this connection data only as long as it is needed to deliver and protect the website, and then deletes it. Details are in Cloudflare's privacy information. I do not use Cloudflare Web Analytics, and this website does not keep its own visitor log. The Cloudflare dashboard only shows me aggregated traffic statistics and, if Cloudflare blocks an attack, information about the blocked request.

This website does not set cookies, does not store anything in your browser and does not use analytics, advertising or tracking tools. There is therefore no consent banner.

Fonts, images and icons are hosted with this website. Your browser does not contact Google Fonts or any other third-party service to load them. The website does not embed social media feeds, videos, contact forms or a newsletter.

Discord and BuiltByBit are external links. Merely displaying these links does not connect you to those platforms. If you open one, the destination receives connection data and processes it under its own privacy policy.

The email link opens your own mail application; it does not send anything by itself. If you email me, I use your address and message only to read and answer your enquiry. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in communicating with people interested in my work.

Emails to addresses at romangrosz.com are received and stored with iCloud Mail, a service of Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple may also process this data outside the European Economic Area. Details are in Apple's privacy policy.

Messages are deleted once the enquiry is resolved and there is no continuing reason to keep them, unless legal retention obligations apply. If you contact me on Discord, Discord also processes the message under its privacy policy.

You are not required to provide personal data. Without the technical connection data described in section 2, however, the website cannot be displayed. Contacting me is voluntary. There is no automated decision-making or profiling within the meaning of Article 22 GDPR.

Under the applicable conditions, you may request access to your personal data, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.

You may also lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. A list of German authorities is published by the Federal Commissioner for Data Protection and Freedom of Information.

The information requirements are set out in Article 13 GDPR. Rules on storing information on a device are set out in Section 25 TDDDG.