Privacy Policy

Overview

This privacy policy explains which personal data is processed when you visit shariat.de, why it is processed and which rights you have. This is a private portfolio website. I do not sell data, I do not use analytics or advertising services, and I only process data where it is technically necessary or where you send it to me yourself.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Hosting, Cloudflare and server logs

This website runs on a server that I operate myself. Requests to shariat.de are routed through the content delivery network and reverse proxy of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which protects the site against attacks and delivers it faster. Cloudflare thereby processes the IP address and the technical request data of every visitor. Cloudflare is certified under the EU-US Data Privacy Framework and additionally offers EU standard contractual clauses. Further information: https://www.cloudflare.com/privacypolicy/

When you access the site, the following data is automatically recorded in server log files: IP address, date and time of the request, requested page or file, the page you came from (referrer), browser type and version, operating system and HTTP status code. This data is not merged with other data sources and is used only to keep the site stable and secure, to detect attacks and to find errors. It is deleted regularly.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable operation of the website).

Cookies and local storage

This website does not set cookies of its own. It stores two values in your browser's local storage:

• language: your chosen language (English or German)
• cookieConsent: whether you have dismissed the notice bar

Both values stay on your device, are not transmitted to me and can be removed at any time by clearing your browser's site data. They are strictly necessary to provide the function you requested (§ 25 (2) TDDDG). Google reCAPTCHA, which is only loaded on the contact page, may set its own cookies (see below).

Contact form and email

If you send me a message via the contact form, your name, your email address and the text of your message are transmitted to me. The message is delivered to my mailbox by email through the email service Resend (Resend, Inc., USA). Resend acts as a processor on my behalf; the transfer to the USA is based on EU standard contractual clauses. Your IP address is additionally kept in the server's memory for a maximum of 24 hours in order to limit the number of submissions per sender (spam protection). If you contact me directly by email, the same applies to the content of your email.

I keep your inquiry for as long as it takes to handle it and for any follow-up correspondence. It is deleted afterwards unless statutory retention periods require otherwise.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures at your request) and Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries and preventing abuse).

Google reCAPTCHA

The contact page uses Google reCAPTCHA v3 to protect the form against automated submissions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA loads a script from Google's servers and analyses your behaviour on the page (for example mouse movements, time spent, IP address and browser information) to decide whether you are a human or a bot. The analysis runs in the background; you are informed that it takes place. Google may set cookies during this process and may transfer the data to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. reCAPTCHA is only loaded on the contact page, not on any other page of this site. Google's privacy policy: https://policies.google.com/privacy

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in protecting the contact form against spam and abuse).

No analytics, no external fonts

This website does not use analytics, tracking or advertising tools of any kind. The fonts used are hosted on my own server; no connection to Google Fonts or any other font provider is established. Images and all other assets are delivered from my own server as well.

Links to external services

The site links to my profiles on GitHub, LinkedIn, X and YouTube. These are plain links; no content from these services is embedded and no data is transmitted to them while you browse this site. As soon as you follow one of these links, the privacy policy of the respective provider applies.

Encryption

This website uses TLS (HTTPS) encryption. Data you send to the site, for example via the contact form, cannot be read by third parties while in transit.

Your rights

Under the GDPR you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden.

Contact

If you have any questions about this privacy policy or want to exercise your rights, please contact me at:Copy My Email