Legal notice and privacy
This page carries the provider identification required by German law (section 5 DDG) and the privacy information required by the GDPR (Articles 13 and 14). The site is operated from Germany, which is why these rules apply.
Provider identification (section 5 DDG)
Michael Pehl
Putbuser Str. 6
18109 Rostock
Germany
Phone: +49 381 371 199 16
Email: info@fepo.app
This site is operated privately and hosts the portfolio of Leah Akoth Ochieng. Nothing is sold through it, and no VAT identification number applies. Bookings are arranged directly with her.
Responsibility for content
The photographs and the video show Leah Akoth Ochieng and are published with her agreement. The titles and placements listed are her own statements. Should anything on this page be inaccurate, please write to the address above and it will be corrected.
External links
This site links to profiles on TikTok and Facebook. Their content is the responsibility of the respective operators. The links were checked when they were added; permanent monitoring is not possible.
Privacy
Controller
The controller for the processing described here, within the meaning of Article 4(7) GDPR, is Michael Pehl at the address given above. For any question about your data, and for the requests listed under Your rights below, please write to info@fepo.app.
Please use that address rather than the contact address shown on the home page: the latter reaches Leah Akoth Ochieng, not the controller, and a request sent there may not be answered in time.
What this site does not do
This site sets no cookies — none at all, not even for statistics. It keeps no access log, and it loads nothing from third-party servers: no web fonts from Google, no video platform, no social media widgets. Fonts, stylesheets, scripts, images and the video are all served from this site's own address, and so is the visitor statistics described below.
That is why you are not being asked for consent: there is nothing to consent to. A cookie banner would have nothing to ask about.
Server log files
Visits to this site are not logged. The web server keeps no record of who opened which page, when, or from which address — the access log is switched off entirely, not merely shortened or anonymised.
One log remains: if the server itself runs into an error, the fault is recorded so that it can be fixed. On a site of static pages this practically never happens, and the file is empty. Should an entry ever be written, the legal basis is Article 6(1)(f) GDPR — the legitimate interest being a working site — and it is deleted automatically after about ten days.
Visitor statistics (Matomo)
This site counts visits with Matomo, an open-source analytics program. It runs on this site's own server (mtm.leahakothochieng.info) — the data is not sent to Google, to Matomo's company, or to anyone else. Nobody but the site owner sees it.
What is recorded: which pages were opened, in what order, from which referring site, with which browser and screen size, and a shortened IP address. What is not recorded: anything that identifies you.
Four settings make that concrete, and they are worth naming:
- No cookies. Matomo is configured to work without them — not merely asked to, but forced, and verified with a real browser.
- Your IP address is shortened before it is stored: the last two blocks are dropped, so
203.0.113.42becomes203.0.113.0. That is accurate enough for a country, not for a person. - Raw data is deleted after 180 days. Only aggregate counts — visits per month, most-viewed pages — remain after that.
- "Do Not Track" is respected. If your browser sends that signal, nothing at all is recorded.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is knowing whether the site is being found and which pages are of interest — for a portfolio site, that is the only way to tell whether it is doing its job. Because no cookies are set and no personal data is stored, this does not require your consent under section 25 TDDG.
If you would rather not be counted: switch on "Do Not Track" in your browser settings, and this site will record nothing. Since nothing personal is stored, there is no individual record to ask about or delete afterwards.
Contact by email
If you write to one of the addresses on this site, your message and your email address are processed in order to answer you. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) where the exchange concerns a possible booking. Messages are deleted once the matter is settled and no retention period requires otherwise.
Processors and recipients
No data is sold, and none is passed on for advertising. The following service providers are involved in operating the site; each is bound by a data processing agreement under Article 28 GDPR:
- Hetzner Online GmbH, Gunzenhausen, Germany — the server, which stands in their data centre in Falkenstein, Germany. Data stays within the EU.
- Cloudflare, Inc., San Francisco, USA — content delivery, caching and protection against automated attacks. Every request passes through Cloudflare before it reaches the server, so Cloudflare does see your IP address, and it keeps its own records of that for security purposes, independently of this site. Cloudflare also operates the email forwarding for this domain. Its handling of the data is described in its own privacy policy.
Cloudflare is based in the United States, a country without an adequacy decision that covers every case. The transfer is based on the European Commission's standard contractual clauses under Article 46(2)(c) GDPR. US authorities may, under certain conditions, be able to access data held by US companies; an effective legal remedy against this is not guaranteed in every case.
Your rights
You have the right to obtain information about the data held about you (Article 15), to have it corrected (Article 16) or erased (Article 17), to restrict its processing (Article 18), to receive it in a portable form (Article 20), and to object to processing based on legitimate interests (Article 21). Write to info@fepo.app; you will hear back within one month.
Note on requests for information: because this site keeps no access log and the statistics store no personal data, there is normally nothing about your visit that could be retrieved for you — the shortened IP address cannot be traced back to a person, which is the point of shortening it. What may exist is what you sent yourself: an email, if you wrote one.
You may also complain to a supervisory authority. For this site that is the data protection officer of Mecklenburg-Vorpommern (datenschutz-mv.de), but you can approach the authority where you live or work instead.
Changes
This page is updated when the site changes. Last revised: 28 September 2026.