1. Last updated: 12 November 2026
2. Who is responsible
   George Smith
   Amsterdamer Str. 18
   13347 Berlin, Germany
   Email: professor@geotheleo.com
   I’m a one-person business, so the person responsible for your data and the person reading your message are the same: me.
3. Visiting this website: server log files
   When you open a page, your browser automatically sends information that the web server records in log files: your IP address, the date and time, the page requested, the website you came from, and your browser and operating system. This is technically necessary to deliver the website and keep it secure.
   Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is a secure, working website. The logs are kept only as long as needed for that purpose and are then deleted.
   Hosting: this website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, which processes this data on my behalf under a data processing agreement (Art. 28 GDPR).
4. Fonts
   The fonts on this website are loaded from this website’s own server. No connection to Google or any other font provider is made when you visit.
5. Requesting my CV
   If you request my CV, the form asks for your name, email address, company or agency, what kind of contact you are, and your consent. I use these details to send you the CV and, if there’s a fit, to reply to you. Your request reaches me as an email. The website itself does not keep a copy.
   Legal basis: your consent, Art. 6(1)(a) GDPR. If your request concerns a possible project or job, also Art. 6(1)(b) GDPR (steps taken at your request before a contract). You can withdraw your consent at any time by emailing me; this doesn’t affect anything done before you withdrew it.
   How long: if nothing comes of your request, I delete it within six months. If we work together, I keep what the law requires, for example for tax records.
   Spam protection: the form uses a spam filter that runs entirely on this website’s server. Your details are not sent to any spam-checking service.
6. Emailing me
   If you email me, I use your address and message only to reply and to handle your request.
   Legal basis: Art. 6(1)(b) GDPR if it concerns a possible project or job; otherwise Art. 6(1)(f) GDPR (my legitimate interest in answering messages sent to me). I delete emails once the conversation is finished, unless the law requires me to keep them.
7. Cookies
   This website sets no tracking or marketing cookies, which is why there’s no cookie banner. WordPress sets technically necessary cookies only when someone logs in to the admin area, which is me.
   Legal basis: § 25(2) No. 2 TDDDG.
8. Links to other websites
   This website links to LinkedIn, GitHub, Instagram and my live project demos (hosted on Streamlit Community Cloud). These are plain links: no data reaches those services until you click one. After that, their own privacy policies apply.
9. Your rights
   You have the right to:
   access the data I hold about you (Art. 15 GDPR)
   have it corrected (Art. 16)
   have it deleted (Art. 17)
   have its processing restricted (Art. 18)
   receive it in a portable format (Art. 20)
   object to processing based on legitimate interest (Art. 21)
   withdraw your consent at any time (Art. 7(3))
   Just email professor@geotheleo.com.
   You can also complain to a data protection authority (Art. 77 GDPR). Mine is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.
10. Security
    This website is served over an encrypted connection (TLS/HTTPS), so what you send through the form can’t be read on the way.
11. No automated decisions
    I don’t use your data for profiling or automated decision-making. Ironic for someone who builds AI systems, I know, but every request is read by a human: me, usually with coffee.
12. Changes
    If the website changes, for example a new feature that processes data differently, I’ll update this policy. The date at the top always shows the current version.