1. Controller
Cüneyt Kaya is responsible for the processing of personal data on this website.
Address: Roßbergstr. 12, 70806 Kornwestheim, Germany. Email: [email protected].
2. Hosting and server logs
When the website is accessed, the hosting infrastructure may process technical connection data such as IP address, access time, requested URL, referrer, browser and operating system to deliver and secure the service.
The legal basis is the legitimate interest in operating a secure and stable website under Article 6(1)(f) GDPR. Logs are retained only as long as needed for security and troubleshooting.
3. Essential cookies and sessions
Technically necessary session and CSRF cookies are used for form security and session management. They are not used for advertising or user profiling.
Blocking essential cookies may prevent forms and session-based features from working correctly.
4. Contact and quotation forms
When you submit a form, your name, email address, requested service, budget information and message are stored in a SQLite database to answer the request and assess a potential business relationship.
The legal basis is Article 6(1)(b) GDPR for pre-contractual requests and Article 6(1)(f) GDPR for general enquiries.
Enquiries that do not result in a contract are reviewed regularly and are normally deleted no later than twelve months after correspondence ends. Statutory retention periods and legal-defence requirements remain unaffected.
5. External resources and review content
Tailwind CSS is loaded from a CDN for page styling. The request may transmit the IP address and technical connection data to the CDN provider.
The SociableKIT component used to display Google reviews is loaded only after the user actively enables it. After activation, SociableKIT and connected third parties may process technical data.
6. External links and sharing
Links to LinkedIn, GitHub, WhatsApp, X and other external services transmit data to the respective provider only when clicked. Their own privacy policies apply.
7. Recipients
Data may be shared with instructed hosting and technical service providers, competent authorities where legally required, or supporting contractual partners when identified in the relevant quotation or invoice.
Personal data is not sold or used to create independent advertising profiles.
8. Your rights
Under the GDPR, you may have rights of access, rectification, erasure, restriction, portability and objection. Where processing relies on consent, consent may be withdrawn for the future.
Send requests to [email protected]. You also have the right to lodge a complaint with a competent supervisory authority.
9. Security and updates
Appropriate technical and organisational safeguards are used against unauthorised access, loss and alteration. No internet transmission method can provide absolute security.
This policy may be updated when website functions or legal requirements change.