Data Protection at a Glance
General Information
The following information provides an overview of how personal data is processed when visiting this website.
This privacy policy applies to bremlo, the personal portfolio website of Benjamin Michael Bremer. The website presents design work, creative projects, case studies, selected freelance services, and digital products.
Personal data means any information that can be used to directly or indirectly identify a person, such as name, email address, IP address, device information, request data, form input, or communication content.
Controller
The controller responsible for data processing on this website is:
Benjamin Michael Bremer
Gartenstraße 58a
29525 Uelzen
Germany
Email
hi@bremlo.uk
How Data Is Collected
Some data is collected when you voluntarily provide it, for example when you contact me by email, submit a contact form, or send a project inquiry.
Other data may be collected automatically when visiting the website. This may include technical information such as IP address, browser type, operating system, device information, referrer URL, access time, requested pages, and server request data.
What Data Is Used For
Personal data may be processed to:
provide and securely deliver the website
maintain website performance, stability, and security
display portfolio pages, project content, visuals, and digital product references
respond to inquiries and communication requests
process contact form submissions and project inquiries
understand basic website traffic and improve the user experience
prevent misuse, spam, technical errors, or abuse
comply with legal obligations where required
Legal Bases for Processing
Depending on the purpose, data processing may be based on:
Art. 6(1)(a) GDPR where consent has been given
Art. 6(1)(b) GDPR where processing is necessary for pre-contractual or contractual communication
Art. 6(1)(c) GDPR where processing is required by law
Art. 6(1)(f) GDPR where processing is necessary for legitimate interests, such as secure website delivery, communication, analytics, error prevention, spam prevention, and portfolio maintenance
Hosting and Website Delivery via Framer
This website is hosted and delivered through Framer infrastructure and related technical service providers.
When visiting the website, technical connection data such as IP addresses, request metadata, browser information, device data, referrer information, access times, and requested resources may be processed to deliver the website securely and reliably.
The processing is necessary to provide the website, ensure stability, prevent abuse, and maintain security.
Legal basis: Art. 6(1)(f) GDPR
Provider: Framer B.V. Rozengracht 207 1016 LZ Amsterdam Netherlands
More information: https://www.framer.com/legal/privacy-statement/
Framer may use technical infrastructure providers and content delivery networks to operate and deliver the website efficiently. Processing by Framer and its sub-processors is based on a Data Processing Agreement (Art. 28 GDPR). Where data is transferred outside the EU/EEA, appropriate safeguards (in particular Standard Contractual Clauses) are in place.
Website Analytics
This website may use privacy-focused analytics to understand basic website traffic and improve the structure, performance, and usability of the website.
Analytics data is used to understand general usage patterns, such as page views, referrers, and interaction with website content. The analytics are not used by me to identify individual visitors.
If Framer Analytics is enabled, Framer states that its analytics do not use cookies and do not generate persistent identifiers.
Legal basis: Art. 6(1)(f) GDPR
Cloudflare Web Analytics
This website may use Cloudflare Web Analytics, a privacy-focused analytics service provided by Cloudflare, Inc.
Cloudflare Web Analytics is used to understand basic website traffic and improve the structure, performance, and usability of the website. According to the provider, Cloudflare Web Analytics does not use cookies, localStorage, or fingerprinting for tracking users. The analytics data is processed in aggregated form and is not used by me to identify individual visitors.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding website usage and improving the user experience).
Provider: Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 USA
More information: https://www.cloudflare.com/web-analytics/
Where personal data is transferred to the United States, the transfer is based on the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR and additional safeguards implemented by Cloudflare. A Transfer Impact Assessment has been taken into account.
Portfolio Pages and Project Content
This website includes portfolio pages, project previews, case studies, visuals, descriptions, and selected client or collaboration references.
When accessing portfolio or project pages, technical data such as IP address, browser type, access time, and requested resources may be processed by the hosting provider to ensure proper delivery and functionality.
No additional personal data is intentionally collected specifically for viewing project content.
Some project pages may contain links to external platforms such as Behance, Dribbble, LinkedIn, X, Payhip, or other third-party websites. Once you leave this website, the respective privacy policies and data processing practices of the external providers apply.
Contact Form and Project Inquiries
This website provides a contact form for project inquiries and communication.
If you submit the contact form, the information you provide may be processed for the purpose of handling your inquiry and any related follow-up communication. The data processed may include your name, email address, message content, budget information, timeline information, timestamp, and technical metadata required to transmit and protect the form.
Legal basis:
Art. 6(1)(b) GDPR where the inquiry relates to a project, collaboration, service, or potential contractual relationship
Art. 6(1)(f) GDPR for general communication, spam prevention, secure form delivery, and documentation of inquiries
The form is processed via Framer’s infrastructure. A Data Processing Agreement pursuant to Art. 28 GDPR is in place with the service provider. The data will not be shared with third parties without your consent unless required by law or necessary to process your request.
Email Communication
If you contact me by email, the data you provide will be processed for the purpose of handling your inquiry and any related follow-up communication.
This may include your email address, name, message content, technical email metadata, and any information you voluntarily include in the message.
Legal basis: Art. 6(1)(b) GDPR where the communication relates to a project, collaboration, service, or potential contractual relationship
Legal basis: Art. 6(1)(f) GDPR for general communication and documentation of inquiries
External Sales Platform Polar
Digital products offered or linked on this website (including products sold via the Framer Marketplace) may be sold through the external platform Polar.
When you click a product or purchase link, you may be redirected to Polar’s checkout. Personal data required for purchases, payment processing, invoices, delivery of digital products, customer communication, or order handling is processed directly by Polar as Merchant of Record.
I do not process payment data (credit card details, etc.) myself.
Legal basis: - Art. 6(1)(b) GDPR where processing is necessary for purchasing or accessing digital products - Art. 6(1)(f) GDPR for linking, presenting, and managing digital products
Provider: Polar Software, Inc.
More information: https://polar.sh/legal/privacy
Social Media and Portfolio Platforms
This website may link to external social media, portfolio, and professional platforms.
These may include:
LinkedIn
Behance
Dribbble
X
Polar
other project, portfolio, or resource platforms
When you visit these platforms, personal data may be processed by the respective provider. I have no control over the data processing practices of external platforms.
Legal basis: Art. 6(1)(f) GDPR
More information:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
Behance / Adobe:
https://www.adobe.com/privacy.html
Dribbble:
https://dribbble.com/privacy
Polar:
https://polar.sh/legal/privacy
External Links
This website may contain links to external websites, including project pages, portfolio platforms, social media profiles, digital product platforms, tools, resources, and third-party websites.
When you click an external link, you leave this website. The respective external provider is responsible for any data processing that takes place on their website.
I have no control over the data processing practices of external websites.
Cookies and Local Storage
This website does not intentionally use marketing or advertising cookies.
Technically necessary cookies, local storage, or similar technologies may be used if required for website functionality, security, accessibility, preferences, analytics, spam prevention, or technical delivery.
If future features require non-essential cookies or tracking technologies, this privacy policy will be updated and consent will be requested where required.
Data Sharing
Personal data is not sold.
Personal data may be shared with technical service providers where necessary to operate, secure, analyze, or maintain the website.
This may include hosting providers, infrastructure providers, analytics providers, form providers, email providers, sales platforms, or external platforms used for portfolio, communication, and digital products.
Where required, service providers are used on the basis of appropriate data protection agreements.
International Data Transfers
Some service providers may process data outside the European Union or the European Economic Area (in particular the United States).
Where data is transferred to countries outside the EU/EEA, such transfers are carried out only on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular the EU Standard Contractual Clauses (SCCs), and where necessary additional measures. A Transfer Impact Assessment is taken into account for providers located in the USA.
Storage Duration
Personal data is stored only for as long as necessary for the respective processing purpose.
Communication data and project inquiries may be stored for as long as necessary to process the inquiry and for reasonable documentation purposes.
Technical server, analytics, security, and form-related logs may be stored temporarily for security, troubleshooting, debugging, and abuse prevention.
Data may be stored for longer periods if legal retention obligations apply or if storage is necessary to establish, exercise, or defend legal claims.
Your Rights
You have the right to request information about the personal data stored about you.
You also have the right to request correction, deletion, restriction of processing, or data portability where legally applicable.
You have the right to object to certain forms of processing, especially where processing is based on legitimate interests under Art. 6(1)(f) GDPR.
Where processing is based on consent, you may withdraw your consent at any time with future effect.
To exercise your rights, you can contact me at:
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
You may contact the data protection supervisory authority responsible for your place of residence, your workplace, or the place of the alleged infringement.
SSL/TLS Encryption
This website uses SSL/TLS encryption to protect data transmission.
You can usually recognize an encrypted connection by the lock icon in the browser address bar.
Objection to Advertising Emails
The use of contact data published on this website for unsolicited advertising, spam, or promotional communication is hereby objected to.
Legal action may be taken in the event of unsolicited promotional communication.
Data Protection Officer
I have not appointed a Data Protection Officer, as this is not required under Art. 37 GDPR for this website (personal portfolio of a single individual without systematic large-scale processing of personal data).
Changes to This Privacy Policy
This privacy policy may be updated to reflect legal, technical, operational, or regulatory changes.
The current version is always the version published on this website.
Last Updated August 2026