Privacy
This site sets no cookies of its own and loads nothing from other people's servers. There are statistics, but only once you explicitly agree – decline, or say nothing at all, and the only data processed is what you send through the contact form yourself.
Responsible party
Responsible for the processing is me, Arda Cansız. There is no company and nobody else behind it; my address is in the imprint. For questions about data protection a message to is enough.
Visiting the site
When you open the site, your browser transmits technically necessary data to the server, including your IP address. The web server keeps an access log of this, holding the IP address, the time, the address requested, the status code and the amount of data sent. It serves secure operation and troubleshooting, is not combined with other data and is not tied into any profile. There is no fixed deletion period; entries are kept for as long as they are of use for those purposes. You may ask at any time for the entries concerning you to be deleted. The legal basis is the legitimate interest in operating the site securely (Art. 6(1)(f) GDPR). The connection is encrypted with TLS throughout.
Statistics and session recording
Statistics only load once you explicitly agree. Until you do, the software for it is not even downloaded – there is no connection, no cookie and no entry in your browser. The legal basis is your consent (Art. 6(1)(a) GDPR).
If you agree, what gets collected is:
- the pages you open, when and for how long, and the page you came from
- browser, operating system, kind of device, screen size, language and chosen colour scheme
- your interactions: clicks, mouse movement and scrolling, plus loading times and errors
- a recording of your session that can later be watched like a video
What you type into fields is not collected. Whatever goes into the contact form stays unreadable in the recording – your name, address and message reach me through the form itself, not through the statistics.
The statistics run on a server I operate myself. No third-party service is involved, no data goes to a third country, and none of it is used for advertising. There is no fixed deletion period: recordings and analysis are kept, so that how the site develops stays visible across the years. With your consent the statistics set a cookie and store values inlocalStorage to tie the requests of one session together.
You can withdraw your consent at any time through the statistics link in the footer of every page. Withdrawal takes effect immediately: the recording stops, the stored values are deleted, and the question is open to you again. Data collected until then was collected lawfully. Since it is kept without a fixed deadline, you have the right to have it deleted on request - an informal message is enough, and I will act on it.
Contact form
Processed in the form: name, email address and message, plus the optional entries for project type and timing. These are delivered by email to me for the sole purpose of answering the enquiry. There is no database; the message then sits in the mailbox and is deleted once the enquiry is settled and no retention duty stands in the way.
The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR), or for purely general enquiries the legitimate interest in answering them (Art. 6(1)(f) GDPR). The entries are voluntary; without a name, an email address and a message the enquiry cannot be answered.
Protection against automated submissions
To prevent misuse, five submissions per connection per hour are possible. For this no IP address is stored, only a non-reversible hash of the IP address, the current hour and a secret value. That counter sits in the server's temporary directory and loses its meaning with the next hour. The form also contains a field invisible to you and checks how long filling it in took — both serve solely to fend off automated submissions. The legal basis is the legitimate interest in a working contact channel (Art. 6(1)(f) GDPR).
Contact by email
If you write directly, your sender address and the content are stored to deal with the message and deleted once it is settled. Legal bases as for the contact form.
Fonts and external content
The font is served from my own server. No fonts, scripts or images are loaded from external servers, so no connection data reaches third parties. Links to external sites are marked as such and open only after an explicit notice; their provider is responsible for their content and data processing.
Storage in the browser
Without your consent no cookie is set. localStorage then holds just two values, neither of which leaves your device: the colour scheme you chose, and your answer to the question about statistics – the latter even when you declined, because otherwise you would be asked again on every page. If you agree, the cookie and the values of the statistics are added. All of it can be cleared at any time through the browser settings.
Recipients of the data
The data is not sold and not used for advertising. Access is held by me alone and, for technical reasons, by the provider of the server and the mailbox; a data processing agreement under Art. 28 GDPR is in place with them. No transfer to third countries takes place.
Your rights
You have the right to information, correction, deletion, restriction of processing, data portability and objection to processing based on legitimate interest (Art. 15 to 21 GDPR). An informal message is enough. You may also complain to a supervisory authority; in Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.
This is a translation for convenience. In case of doubt the German version applies.