Privacy Policy
1. Controller
Emil Rüegg Bruchstraße 38 40235 Düsseldorf E-mail: contact@emilrueegg.com Phone: +49 174 6619 401
2. General information on data processing
This Privacy Policy explains what personal data are processed when you visit this website, for which purposes, on which legal bases, and how long such data are retained. It also informs you about your rights as a data subject under the GDPR.
3. Definitions
“Personal data” means any information relating to an identified or identifiable natural person (e.g. name, address, e-mail address, IP address).
4. Legal bases
Processing of personal data takes place in accordance with:
Article 6(1)(a) GDPR – consent (e.g. Google Analytics after acceptance in the privacy banner). Article 6(1)(b) GDPR – performance or initiation of a contract (e.g. handling enquiries). Article 6(1)(c) GDPR – compliance with legal obligations. Article 6(1)(d) GDPR – protection of vital interests in emergencies. Article 6(1)(f) GDPR – legitimate interests (e.g. operation, security and technical optimisation of the website).
For storing or accessing information on a user’s device, the provisions of Sections 25 (1) and (2) TDDDG apply in addition.
5. Provision of the website, hosting and media delivery
Hosting: This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit the site, Vercel processes technical connection data (e.g. IP address, browser type, requested URL, timestamps) to deliver pages and protect the service.
Media CDN: Videos, images and audio are delivered via bunny.net, a service provided by BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). When you load or play media on this site (including short, muted preview videos on the landing page and streams on project pages), your browser connects to Bunny so the portfolio can function. Images and posters may also be fetched server-side and delivered from this website.
These providers act as processors under Article 28 GDPR. Where processing involves transfers to the USA (Vercel), appropriate safeguards apply (EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses).
Purpose: Secure and efficient provision of the online offer. Legal basis: Article 6(1)(f) GDPR.
6. Server log files
When pages are accessed, certain technical information is automatically collected and stored in server log files by the host (Vercel) and, for media requests, by bunny.net.
These may include: IP address, date and time of access, URL requested, referrer URL, HTTP status code, amount of data transferred, browser type/version, and operating system.
Purposes: System security, technical administration, error analysis, and protection against attacks. Retention period: typically short-lived according to the provider’s defaults; longer only if required for investigation of incidents. Legal basis: Article 6(1)(f) GDPR.
7. Cookies and similar technologies
This website does not use advertising cookies. With your consent, Google Analytics 4 may set analytics cookies / similar storage to measure visits.
Local storage: Your privacy-banner choice is stored in the browser’s localStorage so we do not show the banner again on every visit and so we know whether to enable Google Analytics. This preference does not control media playback. The value stays on your device until you change it.
Essential technical storage may also be used by the hosting platform for security and delivery. Legal basis: Article 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG.
You can clear or change your stored choice at any time via “Cookie settings” in the site footer (or by clearing site data in your browser). Withdrawing consent stops further Analytics loading; already collected data remain subject to Google’s retention settings until deleted.
8. Google Analytics
If you accept in the privacy banner, this website uses Google Analytics 4 (Google Ireland Limited / Google LLC, USA), measurement ID G-9L1EY33L3X. The Google tag loads only after acceptance. Usage data (e.g. approximate location derived from IP, device/browser info, pages viewed, events) are processed to understand how the portfolio is used.
Legal basis: Article 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TDDDG. You can withdraw consent anytime via “Cookie settings”. IP anonymisation features of Google Analytics are enabled where available. Transfers to the USA may occur; Google participates in the EU–U.S. Data Privacy Framework and/or uses Standard Contractual Clauses.
Further information: Google Privacy Policy and Google Analytics.
9. Embedded media (video & audio)
Video and audio on this website (landing-page previews and project pages) are streamed from bunny.net. Your browser connects to Bunny’s servers when media loads or plays, regardless of whether you accept or decline in the privacy banner. Posters and photos may also be delivered from this site (including via the image optimizer). Technical data (IP address, browser info) are transmitted to Bunny when streaming occurs.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating a portfolio website that displays audiovisual work). Declining Analytics does not disable media playback.
10. External links to social media
This website contains simple hyperlinks to Instagram and LinkedIn.
No data are transmitted to these platforms when merely loading this website. Data processing by these providers occurs only after actively following a link and is governed solely by their respective privacy policies.
11. Contact by e-mail
When contacting us by e-mail, we process your transmitted data (name, e-mail address, message content) to respond to your enquiry.
Legal bases: Article 6(1)(b) GDPR for contractual or pre-contractual enquiries. Article 6(1)(f) GDPR for other enquiries (legitimate interest in effective communication).
Data will be deleted once your enquiry has been fully processed unless legal retention obligations require longer storage.
12. Recipients and third-country transfers
Within the scope of commissioned processing, the following recipients may have access to personal data:
Vercel Inc. (Hosting / edge delivery)
BunnyWay d.o.o. (Media CDN)
Google Ireland Limited / Google LLC (Google Analytics 4 — only if you accept analytics)
Data may be processed within the EU/EEA or, where necessary, in third countries (specifically the USA for Vercel and, with consent, Google). In such cases, appropriate safeguards (EU–U.S. Data Privacy Framework or Standard Contractual Clauses) ensure adequate protection.
13. Storage periods
Unless otherwise specified, personal data are stored only for as long as necessary to fulfil the respective purposes. After the end of the purpose or expiry of legal retention periods, data are deleted or anonymised. Google Analytics retention follows the setting configured in the Google Analytics property.
14. Security of processing
Technical and organisational measures (encryption in transit, access control, integrity checks) are implemented to protect data against unauthorised access, loss, alteration, or destruction. These measures are continuously adapted to the state of the art.
15. Rights of data subjects
You have the following rights under the GDPR: Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction of processing (Art. 18), Data portability (Art. 20), Objection (Art. 21) to processing based on legitimate interests, Withdrawal of consent (Art. 7(3)) where processing is based on consent.
To exercise your rights, please contact the Controller via the contact details provided above.
16. Right to lodge a complaint
You may lodge a complaint with a supervisory authority, in particular with the State Commissioner for Data Protection and Freedom of Information of
North Rhine-Westphalia, Postfach 20 04 44, 40102 Düsseldorf, Germany, www.ldi.nrw.de.
17. Search Console
We may use Google Search Console to monitor how this website appears in Google search results. This tool does not place tracking cookies on visitors’ browsers; it provides aggregated data on search queries and technical indexing.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in SEO and error detection).
18. Updates to this Privacy Policy
This Privacy Policy may be amended to reflect technical or legal developments. The current version is always available at: https://emilrueegg.com/privacy Last updated: 13 July 2026