LEGAL
Privacy Policy
Last updated: 13 October 2026
1. Controller
The person responsible for processing data on this website is:
Til Müller Am Dreispitz 18 69502 Hemsbach Germany
Telephone: +49 157 5393 1515 Email: kontakt@til-mueller.de
Website: https://www.til-mueller.de
This privacy policy applies to the portfolio available at the following domains:
- til-mueller.de
- til-mueller.com
- til-mueller.net
2. General information about data protection
Protecting your personal data matters to me.
I process personal data exclusively in accordance with applicable law, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, names, email addresses or IP addresses.
This privacy policy explains which data is processed when you use my website, why it is processed and what rights you have.
The website presents my design work, projects and professional activities in Intermedia Design, Game Design, Creative Direction, 3D Art and interactive media.
3. Hosting by STRATO
This website is hosted by:
STRATO GmbH Otto-Ostrowski-Straße 7 10249 Berlin Germany
Website: https://www.strato.de
The provider's privacy information: https://www.strato.de/datenschutz/
I use STRATO to provide a secure and reliable website.
When you access the website, technically necessary data is exchanged between your device and the hosting provider's servers.
The following information, in particular, may be processed:
- IP address of the accessing device
- Date and time of access
- Pages and files accessed
- Browser type and version
- Operating system used
- Referrer URL, if transmitted
- Volume of data transferred
- HTTP status codes
This data is processed to deliver the website technically, ensure stable operation, analyse errors and protect against abusive access.
Legal basis: Article 6(1)(f) GDPR.
The legitimate interest is to provide a secure, functional and reliable website.
Where STRATO processes personal data on my behalf, this takes place in accordance with the legal requirements for processing on behalf of a controller under Article 28 GDPR.
Server log files
STRATO may create and store server log files as part of its hosting service.
These are stored, in particular, to ensure technical operation and to detect and prevent disruptions and attacks.
The specific retention period depends on the hosting configuration used and the provider's terms.
Longer retention may be necessary to investigate specific security incidents or comply with legal obligations.
4. Encrypted data transmission
This website uses HTTPS or TLS encryption.
This encrypts data transmitted between your browser and the web server to protect it against unauthorised access during transmission.
However, complete security for data transmitted over the internet cannot be guaranteed.
5. Contact
If you contact me by email or through this website's contact form, the data you provide is processed to respond to your enquiry.
This may include, in particular:
- Name
- Email address
- Content of your message
- Other information provided voluntarily
The data is used exclusively to handle your enquiry and, where applicable, to initiate or carry out a business relationship.
Legal bases:
Article 6(1)(b) GDPR, where your enquiry relates to entering into or performing a contract.
Article 6(1)(f) GDPR for other enquiries. My legitimate interest is to handle and respond to incoming messages.
The data you provide is deleted once the purpose of processing no longer applies and there are no statutory retention obligations or other legitimate reasons for further storage.
Statutory retention obligations may apply to business correspondence.
The hosting provider and the email service provider used may process data for the technical transmission and handling of messages.
Technical protection of the contact form
The contact form uses the “til_portfolio_contact” cookie, configured to expire after 30 minutes. It associates security information with your form session and helps prevent unauthorised form submissions. The cookie is transmitted only over HTTPS, is inaccessible to JavaScript and is not used for advertising or visitor analytics.
To limit abusive requests, the server processes your IP address to produce a hash using a secret key. The protection files contain this time-dependent hash, an expiry timestamp and a request counter, but no message content. Requests for a form session are limited within 15-minute windows, and message submissions within one-hour windows. Expired protection files are removed during occasional server-side cleanup; expiry already ends their use for the respective limit before removal.
6. Cookies and local storage
This website is designed to minimise the use of data.
Under the current operating concept, no cookies are used for personalised advertising, marketing or analysing individual user behaviour.
No advertising profiles are created.
Language preferences
The website offers a choice between German and English.
When you select a language, your choice may be saved locally in your browser, for example using Local Storage.
This storage serves solely to retain your preferred language when you visit other pages.
The language preference is not used for advertising, tracking or creating user profiles.
Where this storage is strictly necessary to provide the language function you have expressly selected, no separate consent is required under Section 25(2)(2) TDDDG.
Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is to provide the selected language in a user-friendly manner.
You can remove locally stored data at any time through your browser settings.
7. Interactive 3D content and animations
This website uses interactive design elements, 3D visualisations and animations.
These may include JavaScript libraries and web technologies such as Three.js, GSAP, WebGL, HTML and CSS.
These technologies serve to display my design work visually and provide interactive functions.
Running these libraries locally does not, in itself, require personal data to be transmitted to their developers.
The interactive content is not used to track individuals or create user profiles.
Where technically necessary data is processed when the corresponding files are retrieved, this occurs as part of the general provision of the website described in Section 3.
8. Fonts, images and media
This website uses fonts, images, graphics, videos and other media content.
Where these files are served directly by my own hosting provider, technical access data is processed as part of hosting, as described in Section 3.
Externally embedded content may involve additional data processing by the respective providers.
Information about such external links is provided in the following section.
External videos and 360° views
Some project pages offer videos from YouTube and 360° views from Momento360. Initially, only local placeholders are displayed. A connection to the respective provider is established only when you actively load the corresponding content using its button.
YouTube videos are embedded through the youtube-nocookie.com domain. After activation, Google or YouTube may nevertheless process personal data, in particular your IP address, browser information and access data. Depending on the provider and browser settings, cookies or other storage technologies may be used.
Google / YouTube privacy information:
https://policies.google.com/privacy
Momento360, Inc. is used for 360° views. After activation, your IP address, device and browser information and access data may, in particular, be transmitted to Momento360. Momento360's privacy policy also describes cookies and other tracking technologies and processing of data in the United States.
Momento360 privacy information:
These external services may process data outside the European Economic Area. If you do not wish to connect to these providers, do not activate the external content. The respective providers determine their own further data processing; please also consult their privacy information.
9. External links and portfolio platforms
My website contains links to external websites and platforms.
These include, in particular:
ArtStation https://www.artstation.com
SoundCloud https://soundcloud.com
There may also be links to project partners, companies, software manufacturers or other external services.
As long as these services are included solely as ordinary links, displaying such a link generally does not establish a connection to the linked website.
When you click an external link, you leave my website and access the respective provider's website.
The external provider may then process personal data such as your IP address.
The respective provider's privacy policy applies to this processing.
I have no control over data processing by external websites.
10. Web analytics and advertising
Under the current operating concept, this website does not use services for personal visitor analytics or personalised advertising.
In particular, I do not use corresponding analytics or advertising tracking services such as Google Analytics or Meta Pixel.
No individual usage profiles are created for marketing purposes.
Automated decision-making, including profiling within the meaning of Article 22 GDPR, does not take place as part of the website operation described here.
This does not affect the hosting provider's technically necessary processing of access data.
11. Recipients of personal data
Personal data is not sold.
Data is shared only where necessary to provide the website, handle enquiries, fulfil contractual obligations or comply with legal requirements.
The following categories of service providers may, in particular, receive data:
- Hosting providers
- Email service providers
- Technical service providers, where actually used
Where external service providers process personal data on my behalf, the legal requirements for processing on behalf of a controller are observed.
Personal data is transferred to countries outside the European Economic Area only where such processing actually takes place and the legal requirements are met.
12. Retention periods
Personal data is stored only for as long as necessary for the respective processing purpose.
Where statutory retention obligations apply, the relevant data is retained for the period prescribed by law.
Once the processing purpose no longer applies or the relevant retention period expires, the data is deleted unless another legal basis exists for further storage.
Retention of technical server data is governed by the hosting terms and the relevant server configuration.
13. Your rights under the GDPR
You have the following rights within the limits of applicable law:
Right of access (Article 15 GDPR)
You may request information about whether your personal data is processed and, if so, which data.
Right to rectification (Article 16 GDPR)
You may request the correction of inaccurate personal data or completion of incomplete personal data.
Right to erasure (Article 17 GDPR)
You may request the deletion of your personal data where the statutory conditions are met.
Right to restriction of processing (Article 18 GDPR)
Under certain conditions, you may request that processing of your personal data be restricted.
Right to data portability (Article 20 GDPR)
Where the statutory conditions are met, you may request that personal data concerning you be provided in a structured, commonly used and machine-readable format.
Right to object (Article 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where the processing is based on Article 6(1)(e) or (f) GDPR.
Right to withdraw consent (Article 7(3) GDPR)
Where data processing is based on your consent, you may withdraw it at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You may contact me at any time to exercise your rights:
14. Right to lodge a complaint with a supervisory authority
If you believe that processing of your personal data infringes applicable data protection law, Article 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for my location is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Website: https://www.baden-wuerttemberg.datenschutz.de
You may also contact another competent data protection supervisory authority.
15. Updates to this privacy policy
This privacy policy is updated as necessary, in particular when the technical design of my website, the services used or legal requirements change.
The version published on this website at the time applies.
Last updated: 13 October 2026