Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Deniz Bektas
Email: contact@deniz-bektas.com

This is a private website used to introduce myself. It is not used to offer or sell paid services. An email to the address above is enough for any privacy-related question; a full postal address will be provided on request.

2. The short version

This is a purely static website. It sets no cookies, performs no tracking and includes no analytics or advertising services. Fonts are served from this site's own server, so no connection is made to Google Fonts or comparable services.

Personal data is only processed if you actively get in touch — through the contact form or by email.

3. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open the site, Cloudflare processes technically necessary access data, in particular:

• the IP address of the requesting device
• date and time of the request
• name and URL of the file retrieved
• the amount of data transferred and whether the request succeeded
• browser and operating system used

This processing is strictly necessary to operate the site securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a technically sound and secure presentation of the website).

Cloudflare also processes data in the United States. Transfers are based on the European Commission's Standard Contractual Clauses and Cloudflare's certification under the EU-US Data Privacy Framework. A data processing agreement under Art. 28 GDPR is in place. For details see cloudflare.com/privacypolicy .

4. Contact form

If you send an enquiry through the contact form, the data you enter — your name, email address and your message — is processed in order to handle that enquiry.

The technical delivery is handled by Web3Forms (Nodegraph Labs). Your form data is transmitted to their servers and forwarded from there to my mailbox as an email. According to the provider, message content is not stored permanently. See web3forms.com/privacy.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into an agreement, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Name, email address and message are required in order to reply; nothing else is requested.

5. Contact by email

If you contact me by email, your message including any personal data it contains is stored and processed by my email provider 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR.

6. Retention

Data is kept only for as long as the respective purpose requires. Enquiries that do not lead to an ongoing exchange are deleted after six months at the latest. Where a contractual relationship arises, statutory retention periods apply — in particular § 147 AO and § 257 HGB, generally six to ten years.

7. Your rights

You have the following rights at any time regarding your personal data:

• Access to the data being processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to contact@deniz-bektas.com is sufficient to exercise any of them.

8. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

9. TLS encryption

This site uses TLS encryption for security. You can recognise an encrypted connection by the browser address bar switching from “http://” to “https://”. While encryption is active, the data you send cannot be read by third parties.