Privacy Policy

Last updated: September 2026

1 — Who is responsible

The controller responsible for data processing on this website (Art. 4 (7) GDPR) is me, Yasmin Lebedeva. You can reach me at hi@yasminlebedeva.com.

2 — In short

This is a personal portfolio. It has no user accounts, no contact forms and no advertising, and it doesn't set any cookies. To see how the website is used, I rely on cookieless, anonymous analytics. Personal data is only processed where it's technically necessary to show you the website, or when you contact me by email.

3 — Hosting

This website is hosted by Webflow, Inc. (USA). When you visit it, Webflow's servers automatically record technical information your browser sends, such as your IP address, the date and time of the request, the page you visited, the referring page, and your browser and operating system. This is needed to deliver the website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR, a legitimate interest in a secure, working website. Webflow may process this data in the USA; the transfer is covered by appropriate safeguards such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. More information: webflow.com/legal/privacy

4 — Content delivery networks

Files needed to display this website are loaded from content delivery networks: Webflow's own network, Amazon CloudFront (Amazon Web Services, Inc., USA) for a standard script library used by Webflow, and jsDelivr for the smooth-scrolling script. When these files load, your IP address is transmitted to the respective provider. This is necessary for the website to work and load quickly (Art. 6 (1) (f) GDPR).

5 — Theme setting

If you switch between the light and dark theme, your choice is saved in your browser's local storage so the website remembers it on your next visit. This information stays on your device, isn't sent to me or anyone else, and doesn't identify you. You can delete it at any time in your browser settings. This storage is strictly necessary for a feature you actively use (§ 25 (2) no. 2 TDDDG).

6 — Analytics

To understand how this website is used, I use Umami, a privacy-friendly analytics service by Umami Software, Inc. (USA), with data stored in the EU. Umami doesn't use cookies, doesn't store anything on your device and doesn't follow you across other websites. It only records anonymous, aggregated information, such as which pages are visited, the referring website, the country, and the browser, device type and operating system. Your IP address is used only briefly to derive this information and is not stored. This data can't be used to identify you. The legal basis is Art. 6 (1) (f) GDPR, a legitimate interest in understanding how the website is used so I can improve it. More information: umami.is/privacy

7 — Contacting me

If you email me, I process your email address and the content of your message only to reply to you. The legal basis is Art. 6 (1) (b) GDPR if your message is about a potential collaboration, and Art. 6 (1) (f) GDPR otherwise. I delete your data once it's no longer needed, unless I'm required by law to keep it.

8 — External links

This website links to LinkedIn. No data is sent to LinkedIn until you click the link. After that, LinkedIn's own privacy policy applies.

9 — Your rights

You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). To use any of these rights, just email me. You also have the right to lodge a complaint with a data protection supervisory authority, for example the one in the German state where you live.

10 — Changes to this policy

I may update this privacy policy when the website or the legal requirements change. The current version is always available on this page.