Privacy

Controller

The controller under the General Data Protection Regulation (GDPR) is Gowsik Chandran, Zeppelinstr. 12, 26121 Oldenburg, Germany, gowsik.kc@gmail.com.

Hosting and server logs

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes the data your browser sends, such as your IP address, the time of the request, the page requested, the referrer and your browser type, in server logs for delivery, security and error analysis. Legal basis: my legitimate interest in running a secure site, Art. 6 (1) (f) GDPR. Vercel is certified under the EU-US Data Privacy Framework and works under standard contractual clauses. See the Vercel privacy policy.

Usage statistics

I use Vercel Analytics and Vercel Speed Insights to see how many people visit and how fast pages load. Both work without cookies and without identifying you across sites; page views are counted from a hashed, short-lived identifier that cannot be traced back to you. Legal basis: Art. 6 (1) (f) GDPR.

Contact form

If you use the contact form, your name, email address, subject and message are sent to me by email through Resend Inc., USA, so that I can answer you. The data stays in my mailbox until your request is handled and then for as long as commercial and tax law requires. Legal basis: Art. 6 (1) (b) GDPR, or Art. 6 (1) (f) GDPR for general enquiries. See the Resend privacy policy.

Resume request

If you request my resume, your name, email address and language choice are used to send you the PDF through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), and I receive a notification through Resend. The AI twin can trigger the same email at your request during a chat. Legal basis: Art. 6 (1) (b) GDPR. See the Brevo privacy policy.

Bot protection

The chat, the contact form and the resume request are protected by Cloudflare Turnstile (Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA). Turnstile checks whether a request comes from a person by evaluating signals from your browser, including your IP address, and may set a cookie for that purpose. This is strictly necessary to keep the services usable, § 25 (2) TDDDG, and serves my legitimate interest in preventing abuse, Art. 6 (1) (f) GDPR. See the Cloudflare privacy policy.

The AI twin (chat)

The chat is an AI assistant. To answer you, the name you enter and the messages you write are sent to a language model provider together with the information the assistant needs about me. The primary provider is OpenAI, L.L.C., 1455 3rd Street, San Francisco, CA 94158, USA. If OpenAI is unavailable, the same request goes to one of the fallbacks: NVIDIA Corporation (USA), Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Groq, Inc. (USA). These providers process the messages to generate a reply and, under their API terms, do not use them to train their models; OpenAI may keep API data for up to 30 days to detect abuse.

This site does not store your conversation on a server. It is kept only in your own browser (local storage) so that it survives a reload, and you can delete it at any time with the clear button. Please do not enter sensitive personal data in the chat.

Legal basis: Art. 6 (1) (b) GDPR, because the chat is provided at your request, and Art. 6 (1) (f) GDPR. Transfers to the USA rely on the EU-US Data Privacy Framework where the provider is certified, otherwise on standard contractual clauses. See the privacy policies of OpenAI, NVIDIA, Google and Groq.

Voice

If you allow the microphone, your speech is sent to Microsoft Azure Speech (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) to be turned into text, and the assistant's replies are turned into speech the same way. Audio is processed for that purpose only and is not stored by this site. Voice is off unless you turn it on, and you can decline the microphone and keep typing. Legal basis: Art. 6 (1) (b) GDPR. See the Microsoft privacy statement.

Booking a call

The Book a call buttons open the scheduling tool of Cal.com, Inc., USA. The data you enter there, such as your name, email address, the chosen time and any notes, is processed by Cal.com to create the appointment and shared with me. The AI twin can also check my availability and book a slot for you through Cal.com if you ask it to. Legal basis: Art. 6 (1) (b) GDPR. See the Cal.com privacy policy.

Local storage and cookies

Apart from the Turnstile cookie described above, this site sets no cookies and uses no tracking. It stores a few values in your browser's local storage so the chat works: the name you entered, the conversation, the number of messages sent, whether voice is on, and a signed session token that lets the chat accept your messages for two hours without another bot check. These values never leave your browser except as described under the AI twin, and you can remove them in your browser settings. Legal basis: § 25 (2) TDDDG.

Your rights

Under the GDPR you have the right to access the personal data I hold about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on legitimate interest (Art. 21). Where processing rests on your consent, you can withdraw it at any time with effect for the future. To exercise these rights, email gowsik.kc@gmail.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is the Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

Changes

I will update this page when the site or the services it uses change. The date at the top shows the current version.