Privacy Policy

The controller of personal data processed via this website is Moritz Alexander Wright (“I”, “me”, “my”), a natural person based in Berlin • Managua, Germany.

Contact for privacy requests: me@moritzwright.com

This Privacy Policy explains how I process personal data when you visit https://moritzwright.com, contact me by email, or otherwise interact with this personal portfolio website. It is intended to meet the requirements of the EU General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and, where applicable, the German Federal Data Protection Act (BDSG).

Depending on how you use the site, I may process:

• Server / access logs — IP address, date and time, requested URL, referrer, user agent, and similar technical data that hosting providers typically collect to deliver and secure the website.
• Contact data — if you email me (for example at me@moritzwright.com), the content of your message and your email address, plus any other details you choose to include.
• Usage analytics — aggregated page-view and performance metrics via Vercel Analytics and Vercel Speed Insights (typically without cookies).

This website does not currently use a contact form, newsletters, user accounts, payment processing, or advertising trackers.

• Providing and securing the website (Art. 6(1)(f) GDPR — legitimate interests: operating a secure, reliable portfolio site).
• Responding to enquiries (Art. 6(1)(b) GDPR where steps are taken prior to a contract, and/or Art. 6(1)(f) GDPR — legitimate interests in answering professional requests).
• Legal obligations where storage or disclosure is required by law (Art. 6(1)(c) GDPR).

This site aims to operate without advertising cookies or social-media tracking pixels. Essential technical storage may be used by the hosting or delivery stack solely to provide the service (for example load balancing or security).

I use Vercel Analytics and Vercel Speed Insights to understand aggregated page views, basic usage, and real-world performance of the Site. Both are designed to be privacy-friendly and typically do not rely on browser cookies for their core metrics. Data is processed by Vercel as a processor for the purpose of operating and improving this website (Art. 6(1)(f) GDPR — legitimate interests).

If additional non-essential tracking is introduced later, this policy will be updated and, where required by law, consent will be obtained beforehand.

Personal data may be processed by service providers acting on my behalf (processors), in particular hosting and infrastructure providers needed to run the website and deliver email. They process data only under instructions and appropriate data-processing agreements where required.

I do not sell personal data. Data is not shared with third parties for their own marketing purposes.

Where processors are located outside the European Economic Area (EEA), transfers are carried out only with appropriate safeguards under Chapter V GDPR (for example EU Standard Contractual Clauses), unless an adequacy decision applies.

• Server logs are typically retained for a short period necessary for security and operations (often up to 7–30 days, depending on the host), unless a longer period is required to investigate incidents.
• Email correspondence is retained as long as needed to handle your request and for legitimate documentation of professional communication, then deleted or archived according to applicable retention rules.

Under the GDPR you may have the right to:

• Access your personal data (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time where processing is based on consent (Art. 7(3))

To exercise these rights, email me@moritzwright.com. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In Germany, this may be your local Landesdatenschutzbehörde.

I do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on you (Art. 22 GDPR).

This website is aimed at a professional audience and is not directed at children. I do not knowingly collect personal data from children.

I may update this Privacy Policy from time to time. The “Last updated” date at the top will change when material updates are published.

See also the Terms & Conditions for use of this website.