Privacy Policy

1. Data Controller

The controller responsible for processing personal data on this website is Biran Özgür Sariyer. Postal address and contact details are given in the Legal Notice. No data protection officer has been appointed, as there is no obligation to do so.

2. Legal Bases

I process personal data under the General Data Protection Regulation (GDPR), in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual enquiries) and (f) (legitimate interests). The German Federal Data Protection Act (BDSG) and the TDDDG apply in addition.

3. Hosting and Server Log Files

This website is hosted by Cloudflare (Cloudflare, Inc., San Francisco, USA). When you visit it, Cloudflare processes technically necessary data – IP address, date and time, page requested, browser and operating system, and where applicable the previously visited page – to deliver the site and protect it against overload and attacks (Art. 6(1)(f) GDPR). I do not analyse this data myself; Cloudflare keeps it only briefly and then deletes or anonymises it in line with its own policies. Cloudflare is certified under the EU–US Data Privacy Framework.

4. Security and Encryption

I take appropriate technical and organisational measures to protect your data. The whole site is encrypted with SSL/TLS, which you can recognise by “https://” in the address bar. It consists of static pages without a database or user accounts; access to hosting and code is secured with two-factor authentication.

5. Recipients of Data

I share personal data only with service providers needed to run the website: Cloudflare (hosting), Web3Forms (contact form) and – only after your click – YouTube/Google (videos). Data is never passed on for advertising or sold.

6. Contact Form

If you write to me using the contact form, your name, email address, subject and message are sent to my inbox through the Web3Forms service (operated by Web3Creative, India). Web3Forms stores submissions encrypted, among others with AWS and Hetzner (Germany/Finland), and deletes them after three years at the latest; services in the USA (CleanTalk, Akismet) may be used for spam detection. A data processing agreement including the EU Standard Contractual Clauses is in place with Web3Forms. I use this information only to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Spam is blocked with a hidden field; there is no CAPTCHA and there are no cookies. Once your enquiry is settled I delete the message – unless it concerns a contractual collaboration such as an engagement, in which case I keep it for the statutory periods (up to six years for business correspondence).

7. No Cookies, No Tracking

This website sets no cookies, stores no information on your device and uses no analytics, tracking or advertising services (§ 25 TDDDG). That is why there is no cookie banner. Only if Cloudflare suspects an attack may it briefly set a technically necessary security cookie (§ 25(2) no. 2 TDDDG).

8. Embedded Videos (YouTube)

Videos are only loaded when you click “Load video”. Only then is a connection made to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in privacy-enhanced mode (youtube-nocookie.com); among other data, your IP address and browser information are sent to Google, possibly also to Google LLC in the USA. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time for the future by reloading the page. Google's privacy policy: https://policies.google.com/privacy

9. My YouTube Channel

I run a YouTube channel that this website links to. When you visit it, Google's privacy terms apply; YouTube also processes user data for advertising and market research. Rights such as access or objection are most effectively exercised directly with Google (ad settings: https://myadcenter.google.com). I am happy to help if you have questions.

10. Fonts

The fonts on this website are loaded locally from this server. No connection is made to Google Fonts or any other font provider.

11. International Data Transfers

Where data is transferred to the USA, this is based on the European Commission's adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework (Art. 45 GDPR), provided the respective provider is certified. A list of certified companies is available at https://www.dataprivacyframework.gov. Processing by Web3Forms in India and by non-certified sub-processors is covered by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

12. Storage Period

I keep personal data only for as long as is necessary for the respective purpose or required by statutory retention periods; after that it is deleted.

13. Your Rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). A short email is enough.

Right to object: Where I process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work. The authority competent for me is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).

15. Changes

I update this privacy policy whenever the website or the law changes. The version published here always applies.

Last updated: September 2026

This is a translation. In case of discrepancies, the German version shall prevail. German version