Privacy Policy

This website is a personal site. I keep the data it handles to a minimum: it sets no cookies, uses no advertising or tracking, and loads no content from social networks. This page explains what is processed, why, and what your rights are.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is Graham John Dean, Berlin, Germany. You can reach me at hello [at] grahamjohndean [dot] com or through the contact form.

Visiting the website (hosting)

The site is hosted by Vercel Inc. (USA). When you visit, your browser sends technical information that the server needs to deliver the pages: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is processed to deliver the site and keep it secure, which is my legitimate interest (Art. 6(1)(f) GDPR). Vercel keeps these logs only for a short period. See Vercel’s privacy policy.

Visitor statistics

I use Vercel Web Analytics to see which pages are read. It works without cookies and stores nothing on your device. Visits are counted using a temporary identifier derived from the request, which is discarded after 24 hours, so you cannot be recognised across days or across other websites. The statistics show only aggregated figures such as page, referring site, country, browser and device type. The legal basis is my legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

Contact form

If you use the contact form, I receive your name, email address, your message and, where asked, where you are based. I use this only to read and reply to your message (Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR where you are asking about working together). Providing it is voluntary, but I can’t reply without an email address.

The form is delivered to my inbox by Resend, Inc. (USA), an email delivery service, configured to process it in the EU. Your message is kept for as long as our conversation needs it and then deleted, unless the law requires me to keep it longer. I never share it with anyone else or use it for marketing. See Resend’s privacy policy.

Spam protection (Cloudflare Turnstile)

To keep automated spam out of the contact form, the form page uses Cloudflare Turnstile from Cloudflare, Inc. (USA). Turnstile checks whether the form is being filled in by a person, using your IP address and technical characteristics of your browser and device. It does not use cookies for tracking or advertising. The legal basis is my legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR). See Cloudflare’s privacy policy.

Transfers outside the EU

Vercel, Resend and Cloudflare are based in the USA. Where personal data is transferred there, this happens on the basis of the EU–US Data Privacy Framework adequacy decision (Art. 45 GDPR) for certified providers, or of the EU Standard Contractual Clauses (Art. 46 GDPR).

Cookies, fonts and links

This site sets no cookies. Its fonts are served from this website itself, not from Google or any other third party. Links to Instagram, LinkedIn and my Project Coach notes (Obsidian Publish) are plain links: nothing is loaded from those services until you click, after which their own privacy policies apply.

Your rights

You have the right to:

• access the personal data I hold about you (Art. 15 GDPR);
• have it corrected (Art. 16) or deleted (Art. 17);
• restrict its processing (Art. 18);
• receive it in a portable format (Art. 20);
• object to processing based on legitimate interests (Art. 21 GDPR).

To use any of these rights, email hello [at] grahamjohndean [dot] com. You also have the right to complain to a data protection supervisory authority. Mine is the Berlin Commissioner for Data Protection and Freedom of Information.

Children

If you are 16 or under, please don’t send personal information through this website. If I learn that I have received personal information from someone aged 16 or under, I will delete it.

Changes

I’ll update this page if the way the site handles data changes. The date below shows when it was last revised.

Last updated 3 October 2026