Privacy Policy

1. Controller Information

The controller responsible for data processing on this website under the GDPR is:

2. Overview of Data Processing

We treat your personal data confidentially and in accordance with statutory data protection regulations. Personal data is any data that can be used to identify you personally (e.g., name, email address, IP address).

3. Server Log Files

When you visit this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address (anonymized)

The legal basis for processing this data is Art. 6(1)(f) GDPR (legitimate interest in ensuring technical stability and security).

4. Contact Inquiries & Appointment Scheduling

Email / Contact Forms: If you reach out via email or submit a project inquiry, your provided details (name, email, project scope) are stored to process the request and for potential follow-up questions. Basis: Art. 6(1)(b) GDPR (pre-contractual measures).

Calendly Integration: For scheduling consultations on /book, we embed the scheduling widget from Calendly LLC. When using Calendly, data you enter (name, email, meeting notes) is processed on Calendly’s servers subject to standard contractual clauses (SCCs) and GDPR safeguards. Basis: Art. 6(1)(b) GDPR.

5. Data Subject Rights

Under the GDPR, you hold the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request confirmation and details regarding stored personal data.
• Right to Rectification (Art. 16 GDPR): Demand correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17 GDPR): Request deletion of your data when retention is no longer legally required.
• Right to Restriction of Processing (Art. 18 GDPR): Request restricted usage of your data under specific conditions.
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.

6. Inquiries and Complaints

To exercise any of these rights or if you have data protection questions, contact me@shahidmalik.io. You also have the right to lodge a complaint with a competent Data Protection Supervisory Authority (such as the Hessische Beauftragte für Datenschutz und Informationsfreiheit).