Privacy Policy · Portfolio

Last updated: 2026-07-18. This Privacy Policy explains how Daniel Ensminger, trading as x70 (“we”, “us”, “our”), processes personal data when you use https://me.x70.one (this personal portfolio), in line with the EU GDPR and German data protection law (BDSG).

1. Controller

The controller responsible for processing is:

Daniel Ensminger
x70
Altheimer Eck 15
80331 München
Germany
Email: contact@x70.one

2. Categories of personal data

Contact data: name, email, and message content submitted via the contact form.
Newsletter data: email address and subscription status if you opt in.
AI Assistant inputs: conversational messages you send to the on-site assistant.
Technical data: IP address, browser type, device information, pages visited, and referrer when analytics are active.

3. Purposes and legal bases

Responding to inquiries (Art. 6(1)(b) / Art. 6(1)(f) GDPR).
Sending newsletters only with your consent (Art. 6(1)(a) GDPR).
Powering the AI Assistant (Art. 6(1)(f) GDPR — legitimate interest in providing an informational portfolio chat; message content is processed via OpenRouter / model providers).
Analytics (PostHog, Vercel Analytics) only after you consent via our cookie banner (Art. 6(1)(a) GDPR).
Security and abuse prevention (Art. 6(1)(f) GDPR).

4. Cookies and similar technologies

We use strictly necessary storage for preferences (including cookie consent and theme). Optional analytics run only if you click “Accept all”. You can change your choice via “Cookie settings” in the footer.

5. AI Assistant data processing

When you chat with the assistant, your message history is sent in real time to third-party model providers (including those accessed via OpenRouter) solely to generate a response. Do not share highly sensitive, financial, or private personal data in the chat.

6. Recipients

Vercel Inc. — hosting and edge delivery
Resend, Inc. — transactional / newsletter email
OpenRouter / model providers — AI Assistant inference
PostHog, Inc. — product analytics (consent-based)

We do not sell your personal data.

7. International transfers

Some providers are based outside the EEA. Where transfers occur, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

8. Retention

Contact inquiries: typically up to 24 months after the last meaningful contact.
Newsletter: until you unsubscribe or we delete the list entry.
Analytics: according to tool configuration, only while consent remains valid.
AI chat: processed to generate responses; retention follows provider and application settings.

9. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and objection, and withdraw consent at any time. You may lodge a complaint with Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) or your local authority. Contact: contact@x70.one.

10. Data security

We strive to use commercially acceptable means of protecting personal data, but no method of transmission or storage is 100% secure.

11. Changes & contact

We may update this policy; the “Last updated” date will change when we do. Questions: contact@x70.one. Related: Terms of Service · Imprint.