Privacy Policy

1. Controller

2. General Information

This website is a personal portfolio with no user accounts, no contact forms, and no advertising. We do not use Google Analytics or any other tracking or profiling tools. No cookies are set by this website itself.

3. Hosting (Railway)

This website is hosted by Railway (Railway Corp., 340 Pine Street, Suite 1401, San Francisco, CA 94104, USA). When you visit any page, Railway's servers automatically log your IP address, browser type, operating system, referring URL, and date/time of the request. This data is required for technical operation and deleted after a short retention period.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in secure and reliable website operation.
Railway Privacy Policy: railway.app/legal/privacy

4. Content Delivery (Cloudflare CDN)

This website loads JavaScript libraries (Three.js, GSAP) from cdnjs.cloudflare.com, operated by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When these files are fetched, your IP address is transmitted to Cloudflare servers, which may be located outside the EU. Cloudflare is certified under the EU–US Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in fast and reliable delivery of technical resources.
Cloudflare Privacy Policy: cloudflare.com/privacypolicy

5. YouTube Videos (Click-to-Load)

Some pages embed YouTube videos using a privacy-friendly click-to-load mechanism. No connection to YouTube's servers is established when the page loads — a static preview image is shown instead. Only when you actively click the play button does your browser connect to YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), which may then set cookies and process your data according to its own privacy policy.

Legal basis: Art. 6(1)(a) GDPR — your consent (the click).
Google Privacy Policy: policies.google.com/privacy

6. Your Rights under GDPR

You have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

To exercise any of these rights, contact: h.karami94@yahoo.com

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. The authority responsible for Hesse is: