Privacy

The controller responsible for the processing of personal data on this website within the meaning of the GDPR is:

• NamePiers Spencer-Phillips
• AddressTannenstrasse 7, 82049 Pullach im Isartal, Germany
• Emailpierssp@gmail.com

This is a personal, non-commercial portfolio website. It does not use cookies, analytics services, advertising networks, social media plug-ins, or any tracking technologies. The only third-party services used are Google Fonts and the Behold Instagram widget, both described below.

When you visit this site, the hosting provider (SiteGround) automatically collects and stores information that your browser transmits to the server. This is technically necessary to deliver the site and to maintain its security and stability. It typically includes:

• the IP address of the requesting device,
• the date and time of the request,
• the URL of the requested page,
• the HTTP status code and amount of data transferred,
• the referring URL (where applicable),
• the browser type, version, and operating system.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable provision of the website). These logs are stored by the hosting provider for a short retention period and are not merged with other data sources or used to identify individual visitors.

This website uses Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The typefaces Anton, Space Grotesk, and Space Mono are loaded from Google's content delivery network (fonts.googleapis.com and fonts.gstatic.com) when you visit a page on this site.

To deliver the fonts, your browser establishes a connection to Google's servers. This necessarily involves the transmission of your IP address, the URL of the page being viewed, and standard browser and device information to Google. Processing typically takes place on servers within the European Union, but Google may transfer data to its parent company, Google LLC, in the United States. Google relies on the EU-US Data Privacy Framework as a transfer mechanism under Art. 45 GDPR.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in consistent visual presentation). If you do not wish to have your data transmitted to Google in this way, you can block third-party requests in your browser, use a privacy-focused browser extension, or refrain from visiting this site.

Google's privacy policy: policies.google.com/privacy. Google Fonts specifics: developers.google.com/fonts/faq/privacy.

This site embeds a feed of public Instagram posts using Behold (Behold Inc., USA), which loads widget.js from w.behold.so. When the feed loads, your browser may transmit your IP address and standard request information to Behold's servers, and Behold in turn fetches public Instagram images. No Instagram account or cookies are required to view the feed.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in showcasing public Instagram work). Behold's privacy policy is available at behold.so/privacy.

If you contact me by email using the address shown on this site, the email and any personal data it contains (typically name, email address, message content) will be stored for the purpose of handling your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the contact relates to a potential contract, and Art. 6 (1) (f) GDPR otherwise. Emails are retained only as long as necessary to respond to and resolve the matter, after which they may be deleted unless retention is required by law.

This website is hosted by SiteGround Spain S.L.U., Calle de Prim 19, 28004 Madrid, Spain, part of the SiteGround group with EU-based infrastructure. Hosting necessarily involves the processing of access data as described under “Server log files” above. SiteGround acts as a data processor under Art. 28 GDPR.

You have the following rights with respect to your personal data:

• Access (Art. 15 GDPR) — to know what data is held about you;
• Rectification (Art. 16 GDPR) — to correct inaccurate data;
• Erasure (Art. 17 GDPR) — to have your data deleted;
• Restriction of processing (Art. 18 GDPR);
• Data portability (Art. 20 GDPR);
• Objection (Art. 21 GDPR);
• Withdrawal of consent at any time, where processing is based on consent (Art. 7 (3) GDPR);
• Complaint to a supervisory authority (Art. 77 GDPR). The competent authority for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

To exercise any of these rights, please contact me using the details under “Controller” above.

This privacy policy may be updated occasionally to reflect changes in the way the site operates or in applicable law. The current version is always available at this URL.