Privacy policy

Data controller

Privacy at a glance

When you visit this website, technical information is collected automatically in server logs. If you contact us through the form, we use your details to respond to your enquiry. Optional website statistics and optional Google Ads conversion measurement each require your separate consent. You can use the website and contact form without either consent. Our own media are delivered through our hosting; embedded live previews load the external website shown.

Hosting

This website uses Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). When you visit, the server automatically records your IP address, access time and requested page in server logs. These data are needed to provide the website securely and are automatically deleted after a short period.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in providing the website securely and efficiently.

Contact form

When you send a message through the contact form, your details — name, email, project, message, any website address you voluntarily provide, and your design or functionality selections — are transmitted to Formspree (Formspree, Inc., USA) and forwarded to us by email. Sending your enquiry is independent of your choices for website statistics and Google Ads conversion measurement.

We store your data to process your enquiry and delete them when that purpose no longer applies and no statutory retention requirements remain.

Legal basis: Article 6(1)(b) GDPR — steps prior to entering a contract — and Article 6(1)(f) GDPR — our legitimate interest in responding to enquiries.

Processors and recipients

We use the following providers to deliver this website, handle your enquiry and provide the optional Google Ads conversion measurement described below:

• Google Ireland Limited (Dublin, Ireland) — Firebase Hosting and, only with separate consent, Google Ads conversion measurement, as described below.
• Formspree, Inc. (USA) — forwarding contact form submissions to our email address.

Use of these services may also involve processing data in the USA. Consent to optional measurement and the handling of your enquiry are separate matters.

Optional visitor statistics (Karriaro-Loupe / Lighthouse)

We load our self-hosted visitor analytics from lighthouse.karriaro.de only after you separately consent to website statistics. Without that consent, Lighthouse remains off. Consent to website statistics does not enable Google Ads conversion measurement.

With your consent, we collect pages viewed, including URL parameters, referring page, time on page, scroll depth, links clicked, technical loading times, browser, device, screen size and language. A random identifier in your browser’s local storage lets us connect visits on this domain. Form contents and screen sessions are not recorded. We do not automatically obtain names or LinkedIn profiles.

The analytics server uses the IP address sent with the request to derive an approximate region and technical network information. Local IP databases and a DNS lookup may indicate a business network; they do not reliably identify a particular person. The additional providers IPinfo and Dealfront are not enabled for this website. Derived attributes and a daily rotating IP hash are stored. These data are pseudonymous, not fully anonymous. Analytics run on our server at Hetzner in Germany.

Raw visit data are automatically deleted after 365 days; identified bot visits after 30 days. Aggregated statistics may be retained for longer. Enquiries already submitted are handled separately from visitor statistics under the retention periods described for enquiries.

When website statistics are allowed, Lighthouse may use the identifiers lh_sid and lighthouse_consent in local browser storage. We remove these analytics identifiers when you decline or withdraw consent.

The legal basis for optional website statistics is your consent under Article 6(1)(a) GDPR; access to device storage is subject to Section 25(1) TDDDG.

Optional Google Ads conversion measurement

With your separate consent, we measure whether our Google ads lead to a successfully submitted project enquiry. We load the Google tag and enable this measurement only after you explicitly consent to Google Ads conversion measurement. Before that, we do not load a Google tag or send Google Ads measurement requests from this website to Google.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its parent company is Google LLC, USA. This may also involve processing in the USA. For conversion measurement, Google may use cookies or similar identifiers and process technical connection data, particularly your IP address and browser or device information, as well as ad click identifiers and event data.

A conversion event is triggered only after Formspree confirms submission of the contact form. We do not send form contents such as your name, email address, message or any website address you provide to Google, including in hashed form. We do not use enhanced conversions, remarketing or personalised advertising. Enquiries submitted before you consent are not subsequently reported to Google.

The legal basis is your consent under Article 6(1)(a) GDPR and, for access to device storage requiring consent, Section 25(1) TDDDG. The website and enquiry form remain available without consent to Google Ads conversion measurement.

For further information on data use and the technologies Google uses, see Google advertising and privacy. Google describes its technical consent controls under Google Consent Mode.

Your choices and withdrawal of consent

We store your separate choices for website statistics and Google Ads conversion measurement in local browser storage for no more than 180 days under karriaro-consent-v2. This storage allows us to respect your privacy choices. Previous consent to visitor statistics is not extended to Google Ads conversion measurement. Your choices apply only to this website, not automatically to other domains.

You can change or withdraw either consent independently at any time through “Privacy settings” in the footer. When you withdraw consent, we stop further measurement by the relevant service and remove its associated identifiers that our website can access. After you withdraw consent to Google Ads measurement, the page reloads to stop the previously loaded Google tag from continuing to run. Withdrawal does not affect the lawfulness of processing before you withdrew consent.

Live preview of our published work

The muammerkizilaslan.com preview loads that website in an embedded window. Technically necessary connection data are transmitted to its GitHub Pages hosting. Analytics on the embedded website is disabled in this preview. Further information is available in the privacy policy of the featured website.

SSL encryption

This website uses SSL/TLS encryption. Your browser indicates a secure connection in its address bar. Encryption protects data you transmit to us from third-party access during transmission.

Your rights

You have the right to obtain information about your stored personal data, their source, recipients and processing purpose free of charge. You also have the right to rectification, erasure or restriction of processing.

You may withdraw consent at any time with effect for the future.

You have the right to lodge a complaint with a data protection supervisory authority.

Right to object under Article 21 GDPR

Where we process your data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. If we process your data for direct marketing, you may object at any time without giving reasons; we will stop using your data for that purpose. An informal message to kontakt@karriaro.de is sufficient.

Objection to unsolicited marketing email

We object to the use of contact details published to meet legal notice requirements for unsolicited advertising. We expressly reserve the right to take legal action against unsolicited marketing communications.

Last updated: 18 October 2026