Privacy policy

Data controller

Privacy at a glance

When you visit this website, technical information is collected automatically in server logs. If you contact us through the form, we store your details to process your enquiry. Optional visitor statistics are activated only with your consent. Our own media are delivered through our hosting; embedded live previews load the external website shown.

Hosting

This website uses Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). When you visit, the server automatically records your IP address, access time and requested page in server logs. These data are needed to provide the website securely and are automatically deleted after a short period.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in providing the website securely and efficiently.

Contact form

When you send a message through the contact form, your details — name, email, project, message and any design or functionality selections — are transmitted to Formspree (Formspree, Inc., USA) and forwarded to us by email.

We store your data to process your enquiry and delete them when that purpose no longer applies and no statutory retention requirements remain.

Legal basis: Article 6(1)(b) GDPR — steps prior to entering a contract — and Article 6(1)(f) GDPR — our legitimate interest in responding to enquiries.

Processors and recipients

The processing described above involves the following providers, with whom we have concluded data processing agreements under Article 28 GDPR:

• Google Ireland Ltd. (Dublin, Ireland) — delivery of this website through Firebase Hosting (Google infrastructure/CDN), as described above.
• Formspree, Inc. (USA) — forwarding contact form submissions to our email address.

Transfers to the USA are based on the EU–US Data Privacy Framework or standard contractual clauses under Article 46 GDPR. Copies of these safeguards are available on request.

Optional visitor statistics (Karriaro-Loupe / Lighthouse)

We load our self-hosted visitor analytics from lighthouse.karriaro.de only after you choose “Allow statistics”. Without consent, this analytics service stays off; the website remains fully functional.

With your consent, we collect pages viewed, including URL parameters, referring page, time on page, scroll depth, links clicked, technical loading times, browser, device, screen size and language. A random identifier in your browser’s local storage lets us connect visits on this domain. Form contents and screen sessions are not recorded. We do not automatically obtain names or LinkedIn profiles.

The analytics server uses the IP address sent with the request to derive an approximate region and technical network information. Local IP databases and a DNS lookup may indicate a business network; they do not reliably identify a particular person. The additional providers IPinfo and Dealfront are not enabled for this website. Derived attributes and a daily rotating IP hash are stored. These data are pseudonymous, not fully anonymous. Analytics run on our server at Hetzner in Germany.

Raw visit data are automatically deleted after 365 days; identified bot visits after 30 days. Aggregated statistics may be retained for longer. Enquiries already submitted are handled separately from visitor statistics under the retention periods described for enquiries.

We store your choice for no more than 180 days under karriaro-statistics-consent-v1. When statistics are allowed, Lighthouse may also use lh_sid and lighthouse_consent in local storage. When you decline or withdraw consent, we remove these analytics identifiers. Your choice applies only to this website, not automatically to other domains.

The legal basis for optional analytics is your consent under Article 6(1)(a) GDPR; access to device storage is subject to § 25(1) TDDDG. You can withdraw consent at any time through “Privacy settings” in the footer. Withdrawal stops further analytics and does not affect the lawfulness of processing already carried out. We use the necessary local storage to remember your privacy choice.

Live preview of our published work

The muammerkizilaslan.com preview loads that website in an embedded window. Technically necessary connection data are transmitted to its GitHub Pages hosting. Analytics on the embedded website is disabled in this preview. Further information is available in the privacy policy of the featured website.

SSL encryption

This website uses SSL/TLS encryption. Your browser indicates a secure connection in its address bar. Encryption protects data you transmit to us from third-party access during transmission.

Your rights

You have the right to obtain information about your stored personal data, their source, recipients and processing purpose free of charge. You also have the right to rectification, erasure or restriction of processing.

You may withdraw consent at any time with effect for the future.

You have the right to lodge a complaint with a data protection supervisory authority.

Right to object under Article 21 GDPR

Where we process your data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. If we process your data for direct marketing, you may object at any time without giving reasons; we will stop using your data for that purpose. An informal message to kontakt@karriaro.de is sufficient.

Objection to unsolicited marketing email

We object to the use of contact details published to meet legal notice requirements for unsolicited advertising. We expressly reserve the right to take legal action against unsolicited marketing communications.

Updated: September 2026