Privacy Policy
Last updated: 31 August 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Amir Slaimani
Windsheimer Str. 10
91593 Burgbernheim
Germany
Email: emirslaimani@gmail.com
2. General Information on Data Processing
Personal data is processed on this website only to the extent necessary for the technical operation of the website, the presentation of its content, the processing of contact requests, website security, or privacy-friendly statistical analysis of website usage.
Personal data is not used for advertising, marketing, or profiling purposes. No personalized or cross-site tracking is performed.
Cloudflare Web Analytics is used for the statistical analysis of page views and the technical performance of the website. Further information can be found in Section 5 of this Privacy Policy.
Depending on the processing activity, processing is based in particular on Article 6(1)(b) GDPR for steps taken prior to entering into a contract, Article 6(1)(f) GDPR on the basis of legitimate interests in the secure, reliable, and technically optimized operation of this website, or Article 6(1)(a) GDPR where consent has been given.
3. Hosting by Oracle Cloud Infrastructure
This website is hosted on a server provided by Oracle Cloud Infrastructure (OCI). The server used for this website is located in the Frankfurt am Main region in Germany. Oracle identifies the OCI region “Germany Central (Frankfurt)” as eu-frankfurt-1.
When the website is accessed, technically necessary connection data is processed. This may include, in particular, the IP address, date and time of access, requested URL, amount of data transferred, browser or user-agent information, and information about the connection status.
The processing is carried out for the purpose of providing the website, ensuring technical security, and detecting and resolving technical issues on the basis of Article 6(1)(f) GDPR.
Log data is retained only for as long as required for secure technical operation, error analysis, or the prevention of misuse and is subsequently deleted unless a legal obligation or a specific security incident requires longer retention.
Oracle is an internationally operating provider. Where personal data is processed outside the European Economic Area in connection with the provision of the service, Oracle provides appropriate transfer mechanisms, including Binding Corporate Rules or EU Standard Contractual Clauses, where applicable.
4. Supabase
Supabase is used for database functionality and for storing and providing certain content and project images.
The Supabase project is configured in the Central EU (Frankfurt) region. Supabase states that the selected project region determines where the primary project data is stored.
When content provided through Supabase is accessed, a technical connection to Supabase servers may be established. In particular, the IP address and technical connection information may be processed.
Supabase is used on the basis of Article 6(1)(f) GDPR. The legitimate interest consists of the reliable provision of database functionality, media, and technical features of this website.
Supabase provides a Data Processing Addendum for processing activities relevant under data protection law. For necessary international data transfers, this includes, among other safeguards, the EU Standard Contractual Clauses.
5. Cloudflare Web Analytics
This website uses Cloudflare Web Analytics, a web analytics service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
Cloudflare Web Analytics is used to obtain statistical information about the use and technical performance of this website. This may include information such as page views, pages accessed, sources of visits, country-level information, and technical performance and page-loading metrics.
A JavaScript beacon provided by Cloudflare is integrated into the website to collect these metrics. When the website is accessed, the visitor's browser establishes connections in particular to the domains static.cloudflareinsights.com and cloudflareinsights.com. The JavaScript required for web analytics is loaded from static.cloudflareinsights.com. Measurement data is subsequently transmitted to Cloudflare via Cloudflare endpoints, in particular through the /cdn-cgi/rum path.
As part of these technically necessary connections, connection information such as the IP address, browser or user-agent information, and information about the page being accessed may technically be transmitted to Cloudflare.
Cloudflare states that Cloudflare Web Analytics does not use cookies or localStorage to collect usage metrics. According to Cloudflare, Web Analytics also does not fingerprint individual visitors using their IP address, user-agent string, or other characteristics. Cloudflare further states that Cloudflare Web Analytics does not use visitors' personal data to create individual user profiles or for personalized advertising.
Cloudflare Web Analytics is used on the basis of Article 6(1)(f) GDPR. The legitimate interest consists of understanding the use and technical performance of this website in a privacy-friendly manner, identifying errors and performance issues, and improving the website.
The operator of this website does not use information obtained through Cloudflare Web Analytics for personalized advertising or for creating individual user profiles.
Cloudflare is a provider based in the United States. Where personal data is transferred to third countries in connection with the provision of the service, Cloudflare provides appropriate data protection safeguards, including, where applicable, the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses.
Further information about data processing by Cloudflare can be found in Cloudflare's privacy policy and data protection information.
6. Contact Form
A contact form is available on this website.
When you contact me using the form, the information you enter is processed. In particular, the following information is stored:
name,
email address,
message, and
internal administrative information such as processing status and timestamps.
The data is stored in a Supabase database and can only be accessed through the protected administrative area of the website. Contact form messages are not automatically forwarded by email.
The data is processed solely for the purpose of receiving, managing, and responding to your request.
Where your request concerns the potential provision of a service or another contractual matter, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing is based on Article 6(1)(f) GDPR. The legitimate interest consists of responding to communications addressed to me.
Contact requests are automatically deleted no later than four weeks after receipt, unless they have already been manually deleted or there is a legal requirement to retain them for a longer period.
7. Contact by Email
If you contact me directly by email, the information you provide, in particular your email address, the content of your message, and any other information you provide, is processed in order to handle your request.
Gmail by Google is used to receive email.
Depending on the content of the request, processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR.
Google may also process data outside the European Economic Area in connection with its services. Google describes the use of adequacy mechanisms and EU Standard Contractual Clauses where required.
Email communications are deleted when they are no longer required for processing and documenting the request and where no statutory retention obligations apply.
8. Administrative Area and Supabase Auth
The website contains a non-public administrative area. It is used exclusively by the website operator for managing the website.
Visitors cannot register or create user accounts.
Administrative access is protected by authentication and, in addition to login using an email address and password, uses time-based two-factor authentication via TOTP.
Technically necessary authentication information may be stored in the administrator's browser for this purpose. These functions are used exclusively to secure administrative access and do not affect ordinary visitors to the public website.
9. Cookies and Local Browser Storage
At present, this website does not use advertising or marketing cookies, and visitors are not tracked across websites.
According to the provider, Cloudflare Web Analytics does not use cookies or localStorage to collect usage metrics. Cloudflare also states that individual visitors are not fingerprinted for web analytics purposes.
Information may be stored in the browser for other technical functions, for example to retain a language selected by the user. Such information is not used to create user profiles or for advertising purposes.
Technically necessary authentication information may be stored in the private administrative area.
Under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), storing information on or accessing information from a user's terminal device generally requires consent. An exception applies in particular where this is strictly necessary to provide a digital service expressly requested by the user.
10. Project Images and Other Content
Project images and certain other content on this website are provided through Supabase Storage.
When this content is loaded, the browser may establish a direct connection to Supabase. Technically necessary information such as the IP address and information about the requested resource may be transmitted.
The processing is based on Article 6(1)(f) GDPR due to the legitimate interest in the technically reliable and performant presentation of the website.
11. Ratings and Reviews
Reviews or testimonials from real persons may be published on the website.
The person's name and review are published with that person's consent. The legal basis is Article 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future. Following withdrawal, the relevant personal information will be removed from the website unless another legal basis permits its continued processing.
12. No Automated Decision-Making or Profiling
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.
The statistical analysis carried out using Cloudflare Web Analytics is not used to create individual user profiles.
13. Data Security
This website is provided via an encrypted HTTPS connection. This protects transmitted data against unauthorized access while it is being transferred between the browser and the server.
In addition, appropriate technical and organizational measures are used to protect personal data against loss, manipulation, and unauthorized access.
14. Your Rights
Subject to the applicable legal requirements, you have in particular the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to data portability under Article 20 GDPR, and the right to object to certain processing under Article 21 GDPR.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future in accordance with Article 7(3) GDPR.
You also have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority.
For the non-public sector in Bavaria, the competent supervisory authority is in particular:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Email: poststelle@lda.bayern.de
The BayLDA is the data protection supervisory authority for the non-public sector in Bavaria.
15. Changes to this Privacy Policy
This Privacy Policy may be amended if the website, the services used, or the applicable legal requirements change.