Privacy Policy
What happens to your data when you visit this portfolio. In short: very little.
Last updated 21 October 2026
01Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) for this website is Tobias Wedel, who hosts and maintains it as a private individual on behalf of Maria Loureiro.
- Name
- Tobias Wedel
- Address
- Luitpoldstraße 35, 10781 Berlin, Germany
- info@twedel.com
02What this site does not do
- It sets no cookies and stores nothing in your browser, such as local storage.
- It uses no advertising, no cross-site tracking and no social media plugins. Visits are counted anonymously, as described below.
- It has no contact form and no accounts.
- Fonts and images are served from this website itself, not from third-party services.
Nothing is stored on your device, so there is no cookie banner.
03Hosting and technical data
The website is hosted by Vercel Inc., Covina, California, USA, on a Vercel account held by Tobias Wedel. Vercel delivers the pages through its worldwide network and acts as a processor. To deliver a page, Vercel necessarily processes technical data about the request:
- your IP address
- date and time of the request
- the page or file requested, including the CV download, and the response status
- browser and device information sent by your browser (user agent)
Purpose: delivering the website and keeping it secure and stable. Legal basis: legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).
Request logs are visible in the hosting account for one hour on the plan used. Vercel keeps data for its own purposes as described in its privacy policy (opens in a new tab).
04Visitor statistics
To see how the portfolio is used, the site counts page views with Vercel Web Analytics. It sets no cookies and stores nothing on your device. Vercel recognises repeat visits within a day by a hash created from the request, which it discards after 24 hours. The statistics are anonymous and only shown in aggregate.
For each page view, Vercel records:
- the time and the page visited (without query strings)
- the referring website, if your browser sends it
- country and region, derived from the request
- operating system, browser and device type
Purpose: understanding which work is viewed and how visitors find the site. Legal basis: legitimate interest in improving the portfolio (Art. 6(1)(f) GDPR). If your browser sends a Global Privacy Control or Do Not Track signal, no page views are counted. You can also object at any time by email. Statistics are available for one month on the plan used; Vercel may keep them longer, as described in its Web Analytics privacy information (opens in a new tab).
05Transfers outside the EU
Vercel is based in the United States, and its main processing facilities are there. Vercel Inc. is certified under the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (Art. 45 GDPR). Vercel’s data processing addendum (opens in a new tab) also includes the EU Standard Contractual Clauses.
06When you write an email
The email address shown in the contact section, marialoureiro1904@gmail.com, belongs to Maria Loureiro. Messages sent there go directly to her, not to the operator of this website, and she is responsible for handling them. She uses your address, your message and any attachments only to reply and, where relevant, for the application process you are contacting her about. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) or her legitimate interest in answering messages (Art. 6(1)(f) GDPR).
Her mailbox is a Gmail account, so your message is stored by Google. Messages are kept as long as needed for the conversation or application and deleted when they are no longer needed. The same applies to messages sent to the operator.
07LinkedIn and other links
The LinkedIn link is a plain link. LinkedIn receives no data from this site until you click it; after that, LinkedIn’s own privacy policy applies.
08Your rights
Under the GDPR you have the right to:
- access the data held about you (Art. 15)
- have it corrected (Art. 16) or deleted (Art. 17)
- restrict its processing (Art. 18)
- receive it in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
To use any of these rights, contact the controller at info@twedel.com. For emails you sent to Maria, you can also write to her directly. You do not have to give any personal data to look at this website, and no automated decisions are made about you.
09Right to complain
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work. The authority responsible for the controller is the Berlin Commissioner for Data Protection and Freedom of Information:
- Authority
- Berliner Beauftragte für Datenschutz und Informationsfreiheit
- Address
- Alt-Moabit 59–61, 10555 Berlin, Germany
- Phone
- +49 30 13889-0
10Changes
If the website changes, for example by adding a new service, this policy will be updated. The date at the top shows the current version.