This page explains what personal data this website collects, why, and what you can do about it. The short version: the site is static, it sets no tracking cookies, and the only personal data I receive is what you choose to send me through the contact form.
Controller
The controller responsible for data processing on this website is:
Ole Harland
Freelance Product Designer
Postfach 57 03 17
22765 Hamburg
Germany
Email: hello@oleharland.com
Hosting
This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page, Cloudflare's servers process the data your browser sends with every request: your IP address, user agent, the page requested, the referring page, and the date and time of the request. Cloudflare keeps these server logs briefly for security and to deliver the site reliably.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is operating a secure and reliable website. Cloudflare may process data in the United States. Transfers are covered by Cloudflare's certification under the EU-US Data Privacy Framework and by the standard contractual clauses of the European Commission.
Analytics
I use Umami Cloud to understand how the site is used. Umami is a cookieless analytics service provided by Umami Software, Inc., which processes the data on my behalf on servers in the European Union. It records the page URL, the referrer, browser, operating system, device type, country, screen size, and custom events such as a contact form submission.
Umami sets no cookies, does not track you across other websites, and does not store your IP address. Because no information is stored on or read from your device, no consent is required. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is knowing which pages are read so I can improve the site.
Contact form
If you write to me through the contact form, I receive your name, your email address, and your message. The form also records the page it was sent from and, when you arrived from an advertisement, an ad click identifier (gclid) so I know which enquiries come from advertising.
The message is delivered to my mailbox by Resend, an email delivery service of Resend, Inc., USA. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or a step towards one, and otherwise Art. 6(1)(f) GDPR, my legitimate interest in answering enquiries. I keep the data as long as our correspondence requires.
Access codes and preferences
Some case studies are protected by an access code. When you enter one, a cookie stores it so you do not have to enter it on every page. If you switch between light and dark mode, that preference is saved in your browser's local storage.
Both are strictly necessary to provide the function you asked for and are stored under §25(2) TDDDG. No consent is needed. Neither is used for tracking.
Fonts
All fonts are hosted on this website's own servers. No requests are made to Google Fonts or any other font service.
External links
This website links to my profiles on LinkedIn, Substack, X, and GitHub. When you follow one of these links, the privacy policy of that service applies. I have no influence over what those services collect.
Your rights
Under Art. 15 to 21 GDPR you have the right to access the personal data I hold about you, to have it rectified or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw that consent at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.
To exercise any of these rights, write to hello@oleharland.com.
Last updated: 21 September 2026.