Privacy Policy

This is a translation for convenience; the German version (Datenschutzerklärung) is legally binding.

1. Controller

Sunkuru Jagabandhu Patro
Am Europakanal 6, OG 19/03
91056 Erlangen
Germany
Email: sjagabandhupatro@gmail.com
Phone: +49 1521 8159449

2. Overview

This website is a personal professional portfolio. It sets no cookies and uses no advertising. A cookieless analytics service is used to measure reach (see section 5). Fonts are loaded locally from this server; there is no connection to Google Fonts.

3. Hosting and server log files

This website is hosted by Netlify, Inc. (USA). When you visit it, Netlify processes technically necessary data such as your IP address, date and time of access, the page requested, referrer URL, and browser and operating system information, in order to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Data may be transferred to the USA; Netlify bases such transfers on appropriate safeguards under Art. 44 et seq. GDPR. More information: Netlify privacy policy.

4. Language preference

When you switch between English and German, your choice is saved in your browser's local storage (localStorage) so the site appears in your language on your next visit. This information never leaves your device and can be deleted at any time in your browser settings. Storing it is necessary for the service you explicitly requested (§ 25 (2) no. 2 TDDDG).

5. Reach measurement (Umami Cloud)

To understand which content is used, I use Umami Cloud, a privacy-friendly analytics service of Umami Software, Inc., with data processing in the EU. Umami sets no cookies and stores nothing on your device. It records the page visited, the referring website, browser, operating system, device type and country, plus anonymous events such as a section being viewed, the chat being opened, the CV being downloaded or WhatsApp being clicked. The content of chat messages or forms is not recorded. Your IP address is not stored; to count visits, Umami uses a pseudonymous hash of the IP address and browser data with a regularly changing key, which does not allow me to identify you. If your browser sends "Do Not Track", nothing is recorded.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in anonymous reach measurement to improve this website). A data processing agreement is in place with Umami. More information: Umami privacy policy.

6. AI chat assistant (Cloudflare Workers AI)

Using the chat assistant is optional. When you ask a question, your message and the previous messages of this chat are sent through a server function at Netlify to Cloudflare Workers AI (Cloudflare, Inc., USA), which generates the answer with an openly available AI model (Google Gemma) on Cloudflare's servers. Chat conversations are not stored; only technical usage data (such as the model used and the number of tokens) is logged, without message content.

One exception: if the assistant cannot answer a question about my profile from this website, that single question is saved (question text, language and date only; no IP address, no other messages) in a storage service of Netlify, so I can see which information is missing on the site. These entries are deleted automatically after 90 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the content of this website).

Cloudflare processes the chat content only to generate the answer and does not use it to train AI models. Cloudflare is certified under the EU-U.S. Data Privacy Framework; its data processing agreement with EU standard contractual clauses applies. Please do not enter personal or confidential information in the chat. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering visitors' questions about my professional profile). More information: Cloudflare privacy policy and Workers AI data usage.

7. Contacting me

If you contact me by email, phone, WhatsApp or the contact form, I process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed.

Messages sent with the contact form (name, email address, optional company and your message) are received and stored by Netlify Forms (Netlify, Inc., USA, under a data processing agreement with EU standard contractual clauses) and forwarded to me by email. Netlify also filters the form for spam. I delete submissions once your request has been handled, at the latest after six months, unless legal retention obligations apply. The WhatsApp button opens WhatsApp (WhatsApp Ireland Limited / Meta); from then on, WhatsApp's privacy terms apply.

8. Links to external services

This website links to LinkedIn, GitHub, Credly and other certificate verification providers. Data is only transferred to these providers when you click a link; from then on, their privacy policies apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise them, use the email address above. You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Ansbach.

Last updated: October 2026