Data protection

Privacy Notice

Last updated: 11 July 2026

1. Controller

2. Scope

This notice explains how personal data is processed when you visit hannalincoln.com or contact the website operator. The site is a static professional and academic portfolio. It does not use a contact form, user accounts, advertising technology, embedded social-media feeds, or web analytics.

3. Hosting and server log data

The website is hosted by Netlify. When the site is accessed, technical data may be processed automatically to deliver the website securely and reliably. This may include the IP address, date and time of access, requested file or page, referrer information, browser and operating-system information, and technical status data.

The legal basis is the controller’s legitimate interest in providing, securing, and maintaining the website under Article 6(1)(f) GDPR. Log data is retained only for as long as reasonably necessary for security, troubleshooting, abuse prevention, and service operation, subject to the hosting provider’s applicable retention practices.

Netlify may process data in the United States and other countries. Where required, international transfers are supported by an applicable transfer mechanism, such as an adequacy decision, participation in the EU–U.S. Data Privacy Framework, or standard contractual clauses.

4. No analytics, advertising, or non-essential cookies

This website does not currently use analytics tools, advertising pixels, behavioral profiling, or non-essential cookies. A consent banner is therefore not used. If these services are introduced later, this notice and any required consent mechanism will be updated before activation.

5. Fonts and media

The website uses locally available system fonts and does not load fonts from Google Fonts or another external font provider. It does not currently embed third-party videos, maps, social-media posts, or audio players.

6. Contact by email

If you contact the website operator by email, the information you provide is processed to respond to your request and manage any resulting correspondence. Depending on the context, the legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication or Article 6(1)(f) GDPR for other legitimate correspondence.

Messages are retained only as long as needed for the relevant purpose and any applicable legal, accounting, or evidentiary obligations.

7. External links

The website links to external services, including ORCID and LinkedIn. No personal data is transmitted to those services merely because their links appear on this site. Data is transferred to the external provider only when you choose to open the relevant link. The external provider’s own privacy terms then apply.

8. Recipients and processors

Personal data may be processed by service providers used for hosting, domain administration, email, and technical maintenance. These providers receive data only to the extent necessary to perform their services and are subject to applicable contractual and legal safeguards.

9. Your rights

Where the GDPR applies, you may have the right to request access, rectification, erasure, restriction of processing, data portability, and information about the processing of your personal data. You may also object to processing based on legitimate interests under Article 21 GDPR.

Where processing is based on consent, consent may be withdrawn at any time for the future. This website does not currently rely on consent-based analytics or advertising processing.

10. Complaints

You have the right to lodge a complaint with a competent data-protection supervisory authority. In particular, you may contact the authority responsible for your habitual residence, place of work, or the location of an alleged infringement within the European Economic Area.

11. Security

Reasonable technical and organizational measures are used to protect information against unauthorized access, alteration, loss, or disclosure. Website traffic is encrypted using HTTPS once the domain certificate is active.

12. Changes to this notice

This privacy notice may be updated when the website, service providers, or legal requirements change. The current version is published on this page with its revision date.