Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Maximilian Jabs
Teodosio 16, 41002 Sevilla, Spain
Email: contact@maxjabs.com

2. General information

This website is a portfolio site. We only process personal data where necessary to provide the website and to respond to enquiries you send us. This website does not use analytics tools, advertising trackers or its own cookies.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit this website, Vercel automatically processes technical data that your browser transmits (such as IP address, date and time of the request, browser type and operating system) in server log files. This processing is necessary to deliver the website reliably and securely and is based on our legitimate interest (Art. 6(1)(f) GDPR). Log data is not merged with other data sources. Transfers to the USA are safeguarded by the EU standard contractual clauses. Details: vercel.com/legal/privacy-policy.

4. Contact form and email

If you use the contact form, we process the data you provide (name, email address, project type and your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Form submissions are delivered to us by email via the service provider Resend (Plus Five Five, Inc., USA). Resend processes the transmitted data solely to deliver the message. Transfers to the USA are safeguarded by the EU standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

We retain enquiry emails for as long as needed to handle the enquiry and any follow-up correspondence, and delete them when they are no longer required, unless statutory retention periods apply.

5. Vimeo video player

Films on this website are embedded from Vimeo (Vimeo.com, Inc., USA). We use a click-to-play solution: no connection to Vimeo is established and no data is transferred to Vimeo until you actively click the play button. Preview images are hosted on our own server.

Once you start a video, Vimeo processes your IP address and may set cookies or use similar technologies. The legal basis is your consent expressed by starting the video (Art. 6(1)(a) GDPR). Details can be found in Vimeo's privacy policy: vimeo.com/privacy.

6. External links

This website links to external platforms such as Instagram and Vimeo. When you follow these links, the privacy policies of the respective platform operators apply. We have no influence on the data processing carried out by these platforms.

7. Cookies

This website does not set any cookies of its own and does not use any tracking or analytics cookies. Only if you actively start an embedded Vimeo video may Vimeo set cookies as described in section 5.

8. Data security

This website uses TLS/SSL encryption (recognisable by "https" in the address bar) to protect the transmission of any data you send us, such as contact form enquiries. In addition, we use appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access.

9. Storage duration

Unless a more specific storage period is stated in this policy, personal data remains with us until the purpose of the processing no longer applies. If you assert a justified request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible reasons for storing it (for example statutory retention periods).

10. No obligation to provide data / no automated decision-making

Providing personal data on this website is neither legally nor contractually required; without it, however, we may not be able to respond to your enquiry. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

11. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority, in particular the Spanish data protection authority (Agencia Española de Protección de Datos, AEPD, www.aepd.es) or the authority of your habitual residence.

To exercise any of these rights, contact us at contact@maxjabs.com.

12. Changes to this privacy policy

We may update this privacy policy to reflect changes to the website or to legal requirements. The current version is always available on this page.