The short version

This site sets no cookies, uses no analytics, and runs no tracking or advertising of any kind. There is no contact form and no newsletter. That is why you are not being asked to accept anything.

Two things can involve your data: the hosting provider keeps server logs and, only if you choose to use it, the AI assistant sends what you type to a third-party model. Each is described below.

Controller

No data protection officer has been appointed; the statutory thresholds of § 38 BDSG are not met for a site of this kind.

Server logs

The site is hosted on Cloudflare Pages. Like any web server, it automatically records technical data your browser transmits when requesting a page: IP address, date and time, the page requested, referrer, browser and operating system version.

This data is processed on the basis of a legitimate interest under Art. 6 (1)(f) GDPR, delivering the site reliably and defending it against attack. It is not merged with other data and is not used to identify you. Cloudflare, Inc. acts as a processor under Art. 28 GDPR. Where personal data is transferred outside the EEA, Cloudflare's Data Processing Addendum provides appropriate safeguards, including the EU standard contractual clauses.

Fonts

Plus Jakarta Sans is self-hosted and served from this website. Loading the typeface does not create a separate request to Google Fonts or send your IP address to Google.

AI assistant

The floating assistant is optional. Nothing is sent anywhere unless you open it and submit a message. If you do, the following happens:

• Your message and the current conversation are sent to a serverless function hosted on Supabase (Supabase Inc., USA).
• That function forwards them to an AI gateway operated by Lovable, which passes them to a Google Gemini model to generate the reply.
• The reply is streamed back to your browser. The conversation is held in your browser's memory only and disappears when you close or reload the page. I do not store transcripts, and no database record is created.

The legal basis is your consent under Art. 6 (1)(a) GDPR, given by choosing to send a message; you can withdraw it at any time simply by not using the assistant. Retention by those processors is governed by their own policies and is outside my control.

Please do not enter personal, confidential or commercially sensitive information into the assistant. It exists to answer general questions about my work. For anything real, email me, the address is above.

Contacting me by email

The contact page opens your own mail client; there is no form and no data passes through this website. If you email me, your address and the contents of your message are processed to handle your enquiry, under Art. 6 (1)(b) GDPR where it concerns a potential engagement, and otherwise Art. 6 (1)(f). Correspondence is kept as long as needed to deal with the matter and to meet any retention obligations, then deleted.

External links

Links to Dribbble and LinkedIn are ordinary links, not embedded widgets. No data reaches those platforms until you click, at which point their own privacy policies apply.

Your rights

Under the GDPR you have the right to:

• access your data (Art. 15)
• have inaccurate data corrected (Art. 16)
• have data erased (Art. 17)
• restrict processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time, without affecting prior processing

To exercise any of these, email info@petersijtsma.com.

You also have the right to complain to a supervisory authority (Art. 77 GDPR). For Berlin this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

This policy will be updated when the site changes, for example once the fonts are self-hosted. The version you are reading reflects the site as currently deployed.