Navigation

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data-protection legislation is:

Anton Eberl
Königsfelderstraße 24
84100 Niederaichbach
Germany

Email: contact@antonvision.studio

2. Overview

This Privacy Policy explains which personal data is processed when you visit antonvision.studio. Personal data is any information relating to an identified or identifiable individual. It may include IP addresses, device and browser information, contact details and usage data.

The website is a portfolio and includes project pages, contact by email, a standard link to Discord and—only after consent—Cloudflare Web Analytics. No external media from YouTube, Instagram or TikTok is embedded. There are no user accounts, newsletter subscriptions, downloads, contact forms, comments, booking or payment functions, or personalised advertising.

3. Website delivery and hosting through Cloudflare

This website is delivered through Cloudflare Pages and Cloudflare's network. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA.

When the website is accessed, Cloudflare processes technically necessary data. This may include the IP address, date and time of access, requested URL, referrer URL, browser and device information, operating system, HTTP status, amount of data transferred, and routing, security and system information. This processing is necessary to deliver the website, maintain its stability and security, defend against attacks and identify technical errors.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable and efficient delivery of the website. Where information is stored in or accessed from the end user's device solely to transmit a communication or provide a digital service explicitly requested by the user, Section 25(2) TDDDG also applies.

Cloudflare processes certain customer data as a processor. A data processing agreement is in place with Cloudflare. Cloudflare operates a global network and may process data in the United States and the European Economic Area in particular. According to Cloudflare, transfers to the United States are based on its certification under the EU-U.S. Data Privacy Framework. Where that instrument does not apply, Cloudflare's data processing agreement provides for the European Commission's Standard Contractual Clauses and supplementary safeguards.

Data is processed only for as long as necessary for delivery, security, troubleshooting and compliance with legal obligations. Specific periods depend on the type of data, security requirements, contractual settings and Cloudflare's retention rules. Where we can access log data, we delete or anonymise it when it is no longer required for these purposes.

Further information: https://www.cloudflare.com/privacypolicy/

4. Storage of your privacy preferences

To remember your choice in the privacy banner, this website uses only a first-party Local Storage entry named antonvision_consent_v1. It stores the version of the consent request, the time of your choice and your choice concerning Cloudflare Web Analytics. It contains no name, email address or randomly generated user ID.

The choice is stored for six months. You will then be asked again. You may change or withdraw your choice at any time through the “Privacy settings” link in the footer. Following withdrawal, the relevant services will no longer be loaded on future page views. Processing that occurred before withdrawal remains lawful.

Storing the choice is necessary to implement your decision and avoid asking on every page view. The legal bases are Section 25(2)(2) TDDDG and, insofar as personal data is processed, Article 6(1)(c) GDPR in conjunction with the obligation to demonstrate consent and Article 6(1)(f) GDPR. The legitimate interest is the privacy-compliant management of your choice.

5. Cloudflare Web Analytics

With your consent, we use Cloudflare Web Analytics with a JavaScript beacon. The beacon is not automatically injected by Cloudflare into all pages. It is loaded manually only after you have consented to the “Analytics” category.

Your browser loads the script from static.cloudflareinsights.com. The script reads navigation and page-load timing information through the browser's Performance API and sends measurement data to Cloudflare. Connection data such as the IP address and request headers is also transmitted as part of the technical connection. Cloudflare states that visitors are not tracked across different websites and that Web Analytics does not use cookies to recognise individual visitors.

The purpose is a data-minimising measurement of page views and loading performance so that we can assess the reach, stability and user experience of the website. The legal bases are your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent is voluntary and may be withdrawn at any time for the future through “Privacy settings”.

Cloudflare states that unsampled beacon data is retained for seven days. It is then aggregated or reduced. Analytics are currently available in the Cloudflare dashboard for up to six months. Cloudflare's retention rules apply to any further aggregated or technically necessary data.

Further information: https://developers.cloudflare.com/web-analytics/about/ and https://www.cloudflare.com/privacypolicy/

6. Contact by email

The website's contact section displays only contact@antonvision.studio as an email link. There is no contact form. If you email us, we process the information you provide—particularly your email address, name, message, attachments and technical email metadata—to handle and respond to your request.

Incoming messages are forwarded through Cloudflare Email Routing to a private Gmail mailbox. Both Cloudflare and Google therefore process the message and its metadata. The Gmail provider for users in the European Economic Area is generally Google Ireland Limited. Replies are currently sent from a Gmail address, which is visible to the recipient.

The legal basis is Article 6(1)(b) GDPR where the communication concerns steps before entering into a contract or performance of a contract. For general enquiries, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is the appropriate handling and response to messages sent voluntarily. Where a legal retention obligation applies, Article 6(1)(c) GDPR is the legal basis.

Ordinary enquiries are deleted no later than six months after handling is complete unless statutory retention duties, unresolved claims, security reasons or a longer exchange requested by you require continued storage. Copies may temporarily remain within technically necessary backup and deletion cycles operated by the providers.

Please do not send particularly sensitive data by unencrypted email unless necessary. Transmission between mail servers is usually protected by transport encryption, but end-to-end encryption is not automatically guaranteed.

Cloudflare privacy information: https://www.cloudflare.com/privacypolicy/
Google privacy information: https://policies.google.com/privacy?hl=en

The website contains standard links to external services, particularly Discord and potentially social-media profiles. The link itself does not connect to the external provider until you click it. After clicking, you leave our website and the destination provider processes data independently under its own privacy terms.

Where possible, links use rel="noopener noreferrer" and a restrictive referrer policy so that as little information as possible about the previously visited page is transmitted.

Discord privacy information: https://discord.com/privacy

8. Locally hosted fonts

Fonts used on this website are delivered locally through the website or Cloudflare Pages. Merely loading a font does not connect to Google Fonts or another font provider.

9. Recipients and disclosures

We disclose personal data only where necessary to deliver the website and functions you explicitly use, where legally required, or where you have consented. Recipients may include Cloudflare and Google. Public authorities or other bodies receive data only where required by law or necessary to establish, exercise or defend legal claims.

Personal data is not sold.

10. International data transfers

Several providers used by the website are based in the United States or process data through global networks. Depending on the provider and processing, international transfers rely on a European Commission adequacy decision, particularly the EU-U.S. Data Privacy Framework or suitable safeguards such as the European Commission's Standard Contractual Clauses.

Where data is transferred to a country without an adequacy decision, a risk may remain despite contractual and technical safeguards that public authorities can access data and rights cannot be enforced to the same extent as in the European Union.

11. Retention

Unless a specific period is stated in this Privacy Policy, we retain personal data only while the relevant purpose continues. It is then deleted or anonymised unless statutory retention duties, the necessary proof of consent or a legitimate interest in establishing, exercising or defending legal claims requires continued retention.

External providers' deletion and retention rules also apply. We do not always have full control over data processed by an external provider under its own responsibility.

12. Your rights

Where the statutory conditions are met, you have the following rights in particular:

  • access to personal data under Article 15 GDPR;
  • rectification of inaccurate and completion of incomplete data under Article 16 GDPR;
  • erasure under Article 17 GDPR;
  • restriction of processing under Article 18 GDPR;
  • data portability under Article 20 GDPR;
  • objection to processing based on Article 6(1)(e) or (f) GDPR under Article 21 GDPR;
  • withdrawal of consent at any time for the future under Article 7(3) GDPR.

To exercise your rights, email contact@antonvision.studio.

You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The authority generally competent for the controller is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de/

13. Objection to processing based on legitimate interests

Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the relevant data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

14. Voluntary provision and automated decisions

Connection data required to access the website must be processed because the website cannot otherwise be delivered. Contacting us is voluntary.

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

15. Security

The website is transmitted in encrypted form through HTTPS. We and the providers we use apply appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access. Completely risk-free transmission or storage cannot be guaranteed.

16. Changes to this Privacy Policy

We update this Privacy Policy if the website, the providers used or legal requirements change. The version published on this website at the relevant time applies.

Last updated: September 2026

If the German and English versions differ, the German version is authoritative.

We store your choice locally on your device. With your consent, we load Cloudflare Web Analytics to measure page views and loading performance in a data-minimising way. Data may be transferred to the United States. You may freely accept or reject and change your decision at any time through “Privacy settings”.

Your consent is voluntary and may be withdrawn at any time for the future. Cloudflare may transfer data to the United States, relying in particular on the EU-U.S. Data Privacy Framework. Further information is available in the Privacy Policy.

Privacy Policy