Privacy Policy

1. Data Controller

The data controller responsible for this website is:

2. Overview of Data Processing

This website is a personal portfolio showcasing motion design work. We process personal data only to the extent necessary for providing a functional website and our content. The processing of personal data takes place only with your consent or where processing is permitted by law.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, Vercel processes your IP address, browser type, operating system, referrer URL, and the time of the server request. This is necessary to deliver the website (Art. 6(1)(f) GDPR — legitimate interest). Vercel's data processing agreement (DPA) ensures compliance with GDPR. Data may be transferred to the United States under EU Standard Contractual Clauses (SCCs).

4. Video Streaming (Mux)

We use Mux Inc. to deliver video content. When you play a video, your browser connects to Mux's servers (stream.mux.com, image.mux.com), transmitting your IP address, browser information, and playback data. This processing is based on our legitimate interest in providing high-quality video playback (Art. 6(1)(f) GDPR). Mux may process data in the United States under EU Standard Contractual Clauses. For more information, see Mux's Privacy Policy.

5. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that are stored on your device and allow an analysis of your use of the website. Google Analytics is only activated after you have given your explicit consent via our cookie consent banner (Art. 6(1)(a) GDPR).

We have enabled IP anonymization, meaning your IP address is truncated by Google within the EU before being transmitted to the US. Google processes data on our behalf and is contractually prohibited from using the data for its own purposes. Data may be transferred to the United States under EU Standard Contractual Clauses.

You can withdraw your consent at any time by clicking "Cookie Settings" in the website footer. For more information, see Google's Privacy Policy.

6. Cookies

Cookies are small text files stored on your device. We use the following cookies:

* Analytics cookies are only set after you provide consent.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — obtain confirmation of whether your data is being processed and request a copy.
• Right to rectification (Art. 16 GDPR) — request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — request deletion of your personal data.
• Right to restriction (Art. 18 GDPR) — request restriction of data processing.
• Right to data portability (Art. 20 GDPR) — receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR) — object to data processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3) GDPR) — withdraw any previously given consent at any time (e.g., via "Cookie Settings" in the footer).

To exercise your rights, contact us at contact@michaelskoz.com.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

9. International Data Transfers

Some of our service providers (Vercel, Mux, Google) are based in the United States. We ensure that appropriate safeguards are in place for any transfer of personal data outside the European Economic Area (EEA), including EU Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework.

10. Data Retention

Server log data (IP address, access time, browser information) is retained by our hosting provider for a maximum of 30 days. Google Analytics data is automatically deleted after 14 months. Cookie consent preferences are stored for 1 year. We do not store any other personal data.

11. Automated Decision-Making

We do not use automated decision-making or profiling as defined by Art. 22 GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.