Privacy Policy

Protecting your personal data matters to me. In this policy I inform you, in accordance with Art. 13 GDPR, about the nature, scope and purpose of the processing of personal data in connection with the use of my website, and about your rights.

This page is a translation provided for convenience. Only the German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states is:

Harun Kuşkondu

Persebecker Straße 82

44227 Dortmund

Germany

E-mail: info@harunkuskondu.com

I have not appointed a data protection officer, as the legal requirements for doing so do not apply in my case.

2. General information on data processing

2.1 Scope of processing

As a rule, I collect and use the personal data of my users only to the extent necessary to provide a functioning website as well as my content and services. Personal data is generally collected and used only with the user’s consent or on one of the legal bases set out in Art. 6 GDPR.

Where I obtain consent for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis. Where processing is necessary to perform a contract or to take steps prior to entering into a contract, Art. 6 (1) (b) GDPR serves as the legal basis. Where processing is necessary to protect a legitimate interest, Art. 6 (1) (f) GDPR serves as the legal basis.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, technical information (in particular IP address, time of access, page accessed, user agent) is transmitted to Vercel’s servers and processed there.

Purpose: ensuring smooth operation, delivering content via a content delivery network, defending against attacks. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the reliable and secure operation of the website).

Vercel is a US provider. A transfer of personal data to the USA cannot be ruled out. Vercel is certified under the EU-U.S. Data Privacy Framework, so an adequate level of data protection is ensured (adequacy decision of the EU Commission of 10 July 2023). In addition, standard contractual clauses pursuant to Art. 46 GDPR are in place.

Further information: Vercel’s privacy policy.

4. Server log files

When you visit this website, the hosting provider automatically records information transmitted by your browser. This includes in particular:

  • IP address of the accessing device
  • Date and time of access
  • Name and URL of the file retrieved
  • Website from which access is made (referrer)
  • Browser used and, where applicable, operating system and language settings

Purpose: ensuring a smooth connection, convenient use, and evaluation of system security and stability. Legal basis: Art. 6 (1) (f) GDPR. Retention period: for security reasons (e.g. to investigate misuse or fraud), the log files are stored for a maximum of seven days and then deleted. Data whose further retention is required as evidence is exempt from deletion until the respective incident has been finally clarified.

5. Web analytics (Vercel Web Analytics)

Vercel Web Analytics, a privacy-friendly analytics service provided by Vercel Inc., is used to analyse usage behaviour.

Vercel Web Analytics records no cookies and no IP addresses in plain text. Instead, an anonymous hash that changes daily is generated on the basis of the IP address, user agent and visited domain. It allows repeat visits from a device within the same day to be recognised without making it possible to identify individual persons. After 24 hours, a visit can no longer be attributed.

The data recorded includes in particular:

  • Anonymised visitor hash (not attributable to a person, rotated daily)
  • Pages accessed (URL path)
  • Referrer (previous page)
  • Approximate region based on the IP address (e.g. country, but not a precise address)
  • Device type and browser

Purpose: measuring reach and improving the website. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the statistical evaluation of user behaviour in order to optimise my offering). As no cookies or comparable tracking technologies are stored on your device, consent pursuant to Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is not required. Retention period: aggregated statistics are stored by Vercel in accordance with their retention periods. After 24 hours, conclusions about individual persons are technically no longer possible.

Further information: Vercel Web Analytics privacy.

6. Fonts

For display purposes I use the fonts Figtree and Clash Display, which are hosted locally on my servers. When the website is accessed, the font files are delivered together with the other website content. No connection to third-party servers (e.g. Google Fonts) takes place. No personal data is transmitted to external font providers.

7. Contact form

My website offers a contact form that you can use to get in touch electronically. If you use the form, the data you enter is transmitted to me for the purpose of processing your enquiry and for any follow-up questions.

Which data is processed?

  • Mandatory fields: name, e-mail address, message
  • Optional information: telephone number, company, website, subject (depending on the version of the form)
  • Recorded technically: time of submission, the page from which you sent the form, IP address (for spam prevention)

The data is processed exclusively in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (taking steps prior to entering into a contract at your request) or Art. 6 (1) (f) GDPR (legitimate interest in responding to contact enquiries), insofar as your enquiry is not aimed at concluding a contract.

Processor: Resend

For the technical delivery of form messages by e-mail I use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). When you submit the form, the data you have entered is forwarded to my e-mail address via Resend’s infrastructure. Resend processes this data exclusively on my behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. For transfers to the USA, Resend uses standard contractual clauses pursuant to Art. 46 GDPR.

Further information: Resend’s privacy policy.

Spam protection: Cloudflare Turnstile

To protect the contact form against automated submissions (spam and bots) I use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the contact page is accessed, a script is loaded from Cloudflare servers (challenges.cloudflare.com). On the basis of technical characteristics of your browser and your usage behaviour, Turnstile checks whether the input originates from a human or from an automated program.

Data processed: in particular IP address, browser and device information (user agent) as well as technical interaction signals required to distinguish between humans and bots. According to the provider, Turnstile does not use tracking cookies and does not use the data for personalised advertising.

Purpose: preventing spam and abusive automated use of the contact form. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a functioning contact form that is protected against misuse). Insofar as Turnstile stores information on your device or accesses information stored there, this is strictly necessary in order to provide the function you have expressly requested (secure submission of the form) pursuant to Section 25 (2) no. 2 TDDDG, so that consent is not required.

Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46 GDPR are in place. Further information: Cloudflare’s privacy policy.

Retention period

I store your enquiry and the associated personal data for as long as this is necessary to respond to it and to conduct any follow-up conversations. If the enquiry does not lead to a contract, I delete your data no later than 6 months after final processing, unless statutory retention obligations prevent this. If a contractual relationship comes about, the statutory retention periods apply (in particular 6 and 10 years respectively under the German Commercial Code and the German Fiscal Code).

8. Contact by e-mail

You can also reach me directly by e-mail at info@harunkuskondu.com. In this case, the personal data transmitted with your e-mail (in particular name, e-mail address, content of the message) is stored by me in order to process your enquiry.

Purpose and legal basis: processing your enquiry, Art. 6 (1) (b) GDPR (where a contractual relationship is being initiated) or Art. 6 (1) (f) GDPR (legitimate interest in responding).

Retention period: the data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, as a rule no later than 6 months after final processing. If a contractual relationship comes about, the statutory retention periods apply.

Note on security: communication by unencrypted e-mail may have security gaps. Complete protection of your data against access by third parties cannot be guaranteed.

9. Retention periods at a glance

Insofar as no specific retention periods are stated in the sections above, the following principles apply: personal data is deleted or blocked as soon as the purpose of storage no longer applies. Data is stored beyond that point only where this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which I am subject (in particular commercial and tax law retention obligations of 6 and 10 years respectively).

10. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis me as the controller:

  • Right of access (Art. 15 GDPR): you can request information about the personal data I process.
  • Right to rectification (Art. 16 GDPR): you have the right to have inaccurate data corrected without delay or incomplete data completed.
  • Right to erasure (Art. 17 GDPR): you can request the deletion of your data, unless statutory retention obligations prevent this.
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR): you have the right to receive your data in a structured, commonly used and machine-readable format.
  • Right to withdraw consent given (Art. 7 (3) GDPR).

An informal message by e-mail to info@harunkuskondu.com is sufficient to exercise your rights.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for me is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestraße 2–4

40213 Düsseldorf

Telephone: +49 211 384 24-0

E-mail: poststelle@ldi.nrw.de

Website: www.ldi.nrw.de

12. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR.

I will then no longer process the personal data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be made informally by e-mail to info@harunkuskondu.com.

13. Changes to this privacy policy

I reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or in order to reflect changes to my services in the privacy policy (e.g. when introducing new services). The current version then applies to your next visit.

The version published on this page is always the one that applies.