Privacy
Last updated: 26 August 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Johannes F. Müller
Email: mail@overscan.de
Website: overscan.de
The full postal address and further legal information are provided in the Imprint of this website.
2. General Information
I take the protection of personal data seriously and aim to operate this website with as little collection and processing of personal data as reasonably possible.
This website does not use Google Analytics, Meta Pixel, advertising trackers, behavioural profiling or comparable visitor analytics services.
There is no public contact form and no public user account system.
Personal data are processed only where this is necessary to provide and secure the website, to provide functions requested by visitors, to respond to communications, where you have given your consent, or where another legal basis under the General Data Protection Regulation (GDPR) applies.
3. Hosting and Server Log Files
This website is hosted by Host Europe GmbH, Germany.
When you access this website, technical information is transmitted automatically by your browser to the web server. This may include:
* IP address
* date and time of access
* requested page or file
* HTTP status information
* referrer information
* browser and user-agent information
These data are processed in order to deliver the website, maintain its technical stability, detect errors and protect the website against misuse or attacks.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure, reliable and technically correct operation of this website.
According to Host Europe's current information, access logs are generally retained for 14 days and error logs for 7 days. Longer retention may be necessary in individual cases where required for the investigation of a security incident, compliance with a legal obligation or the establishment, exercise or defence of legal claims.
4. Consent Management and Cookies
This website uses a first-party consent system to manage optional external media and services.
On your first visit, you can choose between necessary technologies only and the additional loading of External Media & Services.
Your decision is stored in the first-party cookie jfm_consent.
This cookie:
* stores whether optional external services have been accepted or rejected
* does not contain a unique advertising or tracking identifier
* is not used for behavioural analysis or advertising
* is stored for up to 180 days
* is necessary to remember your privacy choice
You can change or withdraw your decision at any time by selecting Privacy settings in the footer of the website.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
If optional external services are rejected, the main website, articles, photography and locally operating Lab tools remain available. External content that requires consent, such as Vimeo videos or certain interactive 3D components, will not be loaded.
5. Necessary Technologies
Technologies that are strictly necessary for the operation, security or explicitly requested functionality of the website may be used without optional consent.
This includes the consent cookie described above.
The protected administration area also uses a technically necessary session cookie named JFMSESSID. Ordinary public visitors do not receive this administration cookie. It is used only where an administrative or already authenticated session is required and expires with the browser session.
Necessary technologies are not used for advertising, visitor profiling or cross-site tracking.
6. Vimeo Videos
Some Project and Lab pages contain videos hosted by Vimeo.
Before you consent to External Media & Services, no Vimeo player is requested from Vimeo and no connection to Vimeo is established by the embedded video.
If you give consent, Vimeo videos on pages containing them may subsequently be loaded automatically without requiring an additional confirmation for each individual video.
When Vimeo content is loaded, your browser establishes a direct connection to Vimeo. Vimeo may receive technical and usage information including your IP address, browser and device information, information relating to the requested video and information generated through your interaction with the Vimeo player.
Vimeo may also use cookies or similar technologies for purposes including player functionality and preferences, analytics, security, fraud prevention and abuse protection.
The legal basis for loading Vimeo and the associated processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You can withdraw this consent at any time through Privacy settings in the footer. Vimeo content will then no longer be loaded by this website.
Vimeo may process data outside the European Economic Area, including in the United States. Further information about Vimeo's processing of personal data, cookies and international data transfers is available in Vimeo's privacy information.
7. Interactive 3D Content
Some Lab articles contain interactive 3D models, point clouds or Gaussian splats.
The model files themselves are hosted as part of this website. Depending on the file format, the interactive viewer uses external JavaScript libraries or infrastructure provided by services including:
* Google-hosted infrastructure for the model viewer
* jsDelivr for Three.js components
* SparkJS infrastructure for Gaussian Splat rendering
These external viewer components are blocked unless you have consented to External Media & Services.
Even after consent has been given, the external 3D libraries are normally requested only when you actively start the interactive model.
When an external library is requested, the respective provider may receive technical connection information such as your IP address, browser information, requested resource, date and time of the request and other technical request information.
The legal basis for these external requests and the associated processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You can withdraw this consent at any time through Privacy settings.
Depending on the provider and network infrastructure, data may be processed outside the European Economic Area.
8. Local Lab Tools and File Processing
Many tools in the Lab are designed specifically to process data locally in your browser.
This includes, depending on the respective tool, functions such as image and colour analysis, crop and resolution calculations, ASCII generation, palette extraction, QR code generation, shutter calculations and the Lighttable.
When a tool states that an image or file is processed locally, the selected file remains on your device and is processed by your browser. It is not uploaded to the website server for the purpose of performing the calculation or analysis.
Generated previews, calculations and downloads are likewise created locally where indicated by the respective tool.
The Lighttable processes imported images, ratings, positions and notes locally in temporary browser memory. These data are not uploaded to the website, are not written to the website database and are not stored in LocalStorage or SessionStorage. Reloading or leaving the page ends the Lighttable working session.
9. Currency Converter
The Currency Converter uses the public Frankfurter exchange-rate API to retrieve current and historical reference exchange rates.
When the Currency Converter page is opened or a different rate is requested, the website retrieves exchange-rate information from Frankfurter.
The monetary amount you enter is calculated locally in your browser and is not sent to the exchange-rate API.
The request to Frankfurter contains the currency pair required for the calculation and, for historical calculations, the requested date. As with any internet request, technical connection data such as your IP address and browser request information may also be received by the service infrastructure.
Frankfurter states that the API itself does not collect personal data. The public service is delivered through Cloudflare, which may process basic technical request information for performance, security and analytics purposes.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is providing the requested currency-conversion functionality in an efficient and secure manner.
Currency amounts and conversion histories are not stored by this website.
10. Contact by Email, Telephone or WhatsApp
There is no contact form on this website.
If you contact me by email, telephone or another communication channel, I process the information you provide in order to respond to your enquiry.
If your enquiry relates to an existing or potential contractual relationship, the legal basis is Art. 6(1)(b) GDPR.
For other enquiries, processing is based on Art. 6(1)(f) GDPR and my legitimate interest in responding to communications addressed to me.
If you choose to contact me through WhatsApp, you are leaving this website and using a service provided by WhatsApp. WhatsApp processes data independently in accordance with its own privacy terms.
Displaying a WhatsApp contact link on this website does not itself establish a connection to WhatsApp.
Communication data are retained only for as long as necessary to deal with the enquiry and any subsequent business relationship, unless statutory retention obligations or legitimate legal interests require longer storage.
11. External Links and Social Media
This website may contain links to external websites or profiles, for example Vimeo, Instagram, LinkedIn or WhatsApp.
These are ordinary external links rather than automatically loaded social-media plugins.
Except for separately described embedded or external services, no connection to the destination service is established merely because an external link is displayed.
If you select an external link, you leave this website. The operator of the destination website is responsible for the data processing taking place there.
12. Recipients of Personal Data
Personal data are disclosed only where this is necessary for the purposes described in this Privacy Policy, where you have requested or consented to the use of a third-party service, where a service provider is required for the technical operation of the website or where disclosure is required by law.
Depending on the functionality used, relevant recipients or categories of recipients may include:
* Host Europe as hosting provider
* Vimeo when Vimeo content is enabled
* providers of external 3D viewer infrastructure such as Google, jsDelivr and SparkJS
* Frankfurter and its delivery infrastructure when the Currency Converter is used
* communication providers selected by you when contacting me
I do not sell personal data to third parties.
13. International Data Transfers
Some of the third-party services described above operate internationally and may process personal data outside the European Union or European Economic Area, including in the United States.
Where personal data are transferred to a third country, the transfer must be based on a mechanism permitted by Chapter V GDPR.
Depending on the respective provider, this may include an adequacy decision of the European Commission, participation in the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses or another legally recognised transfer mechanism.
Where possible, this website is designed to avoid unnecessary connections to external providers and to load optional third-party services only after consent has been given.
14. Data Retention
Personal data are retained only for as long as necessary for the purpose for which they were collected or for as long as required by applicable legal obligations.
In particular:
* the consent decision is stored for up to 180 days
* Host Europe currently retains access logs for approximately 14 days and error logs for approximately 7 days
* communication data are retained only as long as required for the enquiry, business relationship or applicable statutory retention obligations
* locally processed Lab files are not stored on the website server unless a particular feature explicitly states otherwise
Data may be retained for longer where this is necessary for the establishment, exercise or defence of legal claims or where retention is required by law.
15. Your Rights
Subject to the conditions provided by the GDPR, you have the right to:
* request access to your personal data under Art. 15 GDPR
* request correction of inaccurate data under Art. 16 GDPR
* request erasure under Art. 17 GDPR
* request restriction of processing under Art. 18 GDPR
* receive data you have provided in a structured, commonly used and machine-readable format where Art. 20 GDPR applies
* object to processing based on legitimate interests under Art. 21 GDPR
* withdraw consent at any time with effect for the future under Art. 7(3) GDPR
You also have the right to lodge a complaint with a competent data protection supervisory authority under Art. 77 GDPR, in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
To exercise your rights, you can contact me using the email address stated above.
16. Automated Decision-Making and Profiling
This website does not use automated decision-making within the meaning of Art. 22 GDPR.
No visitor profiles are created for advertising or behavioural analysis.
17. Security
Appropriate technical and organisational measures are used to protect this website and the data processed through it against unauthorised access, alteration, loss or misuse.
The website is served over encrypted HTTPS connections.
Security measures are reviewed and adapted where appropriate in light of technical developments and changes to the website.
18. Changes to this Privacy Policy
This Privacy Policy may be updated when the website, its technical functionality, service providers or applicable legal requirements change.
The current version is always available on the Privacy page of this website.