Skip to content

Privacy Policy

Last updated: October 2026

This is an English translation provided for convenience. In case of doubt, the German version prevails.

1. Controller

The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

Borbála Tasnádi
Buttmannstr. 2
13357 Berlin
Germany
Email: borbala.tasnadi@gmail.com

2. Hosting (GitHub Pages)

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.

When you visit the website, GitHub processes technically necessary data, in particular your IP address, the date and time of access, the page requested, and browser and operating system information. This data is required to deliver the website and keep it secure.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely and reliably.

Data may be transferred to the USA in the process. GitHub is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: GitHub Privacy Statement.

3. Fonts

The fonts used on this website are hosted locally. Visiting the website does not create a connection to servers of Google or any other font provider.

4. Cookies and browser storage

This website does not use tracking cookies or analytics tools.

To remember your choice of light or dark colour scheme, a setting is stored locally in your browser (local storage). This information is not transmitted to me or to third parties. The legal basis is § 25(2) no. 2 TDDDG, as the storage is strictly necessary for the function you requested.

5. Contact form (Formspark)

When you write to me using the contact form, your name, email address and message are processed in order to answer your request.

The form uses Formspark, a service of Trampoline Software SRL, Rue de Marsannay-la-Côte 16, 5032 Mazy, Belgium. Formspark receives and stores the form data and notifies me by email. Your IP address and technical information about your browser are also processed, among other things for spam protection. A data processing agreement under Art. 28 GDPR is in place with Formspark. The form data is processed in the EU (Amazon Web Services, Ireland; Hetzner, Germany). More information: Formspark Data Processing Agreement and subprocessors.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

I delete your data once your request has been fully dealt with, unless statutory retention obligations apply.

6. Contact by email

When you email me, I process your email address and the content of your message in order to answer your request. My mailbox is provided by Gmail, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal bases and storage period are the same as in section 5.

7. Appointment booking (Calendly)

The "Book a free intro call" links on this website lead to the scheduling service Calendly, provided by Calendly LLC, USA. You are only taken to Calendly when you click the link. Calendly's privacy terms apply there: Calendly Privacy Notice.

I process the details you provide when booking (e.g. name, email address, preferred time) to prepare and hold the call. The legal basis is Art. 6(1)(b) GDPR.

This website contains plain links to LinkedIn and GitHub. These are not embedded plugins: no data is transferred until you click a link and visit the platform. The respective provider's privacy terms apply there.

9. Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • have inaccurate data corrected (Art. 16 GDPR)
  • have your data erased (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise these rights, simply email me.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin
www.datenschutz-berlin.de

10. No automated decision-making

No automated decision-making, including profiling (Art. 22 GDPR), takes place.