Legal
Privacy
This privacy notice explains how personal data is processed when you visit this portfolio website.
1. Controller
Alisa Čeh
info@alisaceh.com
I am responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR).
2. How this website works
This portfolio is a static website consisting of HTML, CSS, JavaScript, images and a PDF CV. It does not use a user account, contact form, advertising system, analytics platform, tracking pixel, embedded social-media feed or intentionally placed tracking cookies.
The JavaScript used on the site only controls a small visual behaviour of the sticky navigation while scrolling. It does not send personal data to me or to a third party.
The website contains ordinary links to LinkedIn and an email address. LinkedIn is opened as an external website; there is no LinkedIn plugin or embedded LinkedIn content on this site.
3. Hosting & server logs
This website is hosted by DomainFactory GmbH, c/o WeWork, Neuturmstrasse 5, 80331 Munich, Germany. DomainFactory provides the web hosting infrastructure and may process technical connection data transmitted by your browser, such as IP-address metadata, date and time of access, requested page, referrer URL, browser and device information, and technical status information. This processing is generally necessary to deliver, maintain and protect the website.
Depending on the hosting infrastructure and security services used, DomainFactory may use service providers within the GoDaddy group for certain hosting, network, security and infrastructure services. More information is available in DomainFactory's Privacy Policy.
The exact handling and retention of server log data depends on the hosting configuration. No specific retention period is stated here because this can depend on the configuration used for this website. Where applicable, the legal basis is Art. 6(1)(f) GDPR based on the legitimate interest in secure and reliable website operation.
4. Email contact
If you contact me by email, I process the information contained in your message, including your email address and any personal data you voluntarily provide, solely to handle and respond to your enquiry and, where relevant, to communicate with you about a potential professional opportunity.
The legal basis is Art. 6(1)(f) GDPR for general enquiries and, where the communication relates to taking steps at your request before entering into a contract, Art. 6(1)(b) GDPR. I retain correspondence only for as long as necessary for the relevant purpose or as required by applicable legal retention obligations.
5. LinkedIn
This website contains a normal outbound link to my LinkedIn profile. LinkedIn is not embedded in this website. If you click the link, you leave this website and LinkedIn processes your data as its own controller under its privacy policy.
For users in the EU/EEA, LinkedIn identifies LinkedIn Ireland Unlimited Company as its controller. Please refer to LinkedIn's Privacy Policy for details about its processing, cookies, retention and international data transfers.
6. Cookies & tracking
This website does not intentionally set non-essential cookies or use analytics, advertising or other tracking technologies. Because the site contains no such tools, there is currently no analytics or marketing consent banner.
Any technically necessary storage or access performed by the hosting infrastructure or by the browser/network as part of delivering the requested website is handled only to the extent necessary for the service to function. The applicable rules for access to information stored on a user's device, including § 25 TDDDG, depend on the specific technical setup used by the hosting environment.
7. Your rights
Subject to the legal requirements, you have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and to object to certain processing. Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority depends on the circumstances and your place of residence. In Germany, you can find the relevant state supervisory authority through the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
8. Updates
This privacy notice may need to be updated if the technical setup of the website changes—for example, if analytics, embedded services, a contact form, external fonts or additional third-party tools are added.
Last updated: 12 September 2026