Privacy Policy

Controller

The controller for data processing on this website within the meaning of Art. 4 (7) GDPR is:

Hosting

This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, Vercel processes connection data on my behalf as a processor under Art. 28 GDPR, on the basis of a data processing agreement. The legal basis is my legitimate interest in a secure, fast, and reliably delivered website (Art. 6 (1)(f) GDPR).

This involves a transfer of data to the United States. Vercel Inc. is certified under the EU–U.S. Data Privacy Framework, and standard contractual clauses under Art. 46 (2)(c) GDPR apply in addition.

Server log files

Every page request automatically transmits information that your browser sends. This is recorded temporarily:

• shortened or anonymised IP address
• date and time of the request
• the page or file requested and the amount of data transferred
• browser type and version, operating system, and referring URL

This data is not merged with other data sources and is not used to identify you personally. It is processed on the basis of Art. 6 (1)(f) GDPR — my legitimate interest in operating the site securely and defending against attacks — and deleted once it is no longer needed for that purpose.

Reach measurement

This site uses Vercel Web Analytics to count page views. It works without cookies: it sets no cookie, reads nothing from your device, and creates no persistent identifier or cross-site profile. Requests are aggregated into anonymous statistics — page, referrer, country, device category — from which you cannot be identified. Because no information is stored on or read from your device, § 25 (1) TDDDG does not apply and no consent banner is required. The legal basis is Art. 6 (1)(f) GDPR, my legitimate interest in understanding which content is read.

Local storage

Your language choice (English or German) is stored in your browser’s local storage so the site keeps that setting on your next visit. This is a setting you requested yourself; it is strictly necessary to provide the function and therefore exempt from consent under § 25 (2) no. 2 TDDDG. The value never leaves your device and is not transmitted to me. You can delete it at any time by clearing your browser’s site data.

Contacting me

If you write to me by email, the details you send — your address, your name if given, and the content of your message — are processed solely to handle your enquiry. The legal basis is Art. 6 (1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps, otherwise Art. 6 (1)(f) GDPR. I keep the correspondence until it has been dealt with and any statutory retention periods have expired, then delete it.

External links and embedded services

Links to GitHub, LinkedIn, X, Instagram, and Telegram are plain hyperlinks. Nothing is loaded from those services while you are on this site, and they learn nothing about your visit unless you click through — at which point their own privacy policies apply.

Encryption

This site uses TLS encryption for every connection. You can recognise it by the https:// prefix and the lock icon in your browser’s address bar.

Your rights

In relation to your personal data you have the right to:

• access to the data held about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

To exercise any of these, write to ahouraazarbin@gmail.com. No automated decision-making or profiling under Art. 22 GDPR takes place on this site.

Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace, or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf.