Privacy Policy

1. Overview

We process personal data only as far as necessary to operate this website, to answer your enquiries, or to prepare and carry out a project. We do not sell data, do not use advertising or tracking cookies, and do not build user profiles.

2. Hosting

This website, its database and our analytics service run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany. Hetzner processes the data solely on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

3. Server log files

When you visit the website, our web server automatically stores information sent by your browser:

• IP address
• date and time of access
• requested page or file and HTTP status code
• amount of data transferred
• referrer URL (the previously visited page)
• browser type and operating system (user agent)

This processing serves the secure and stable operation of the website, defence against attacks and error analysis. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security and functionality of the website. Log files are deleted automatically after 14 days. To prevent abuse, the number of form submissions per IP address is limited; for this purpose the IP address is kept in the server’s memory for at most one hour.

4. Encryption

The website is delivered exclusively over an encrypted connection (HTTPS/TLS). Data you send to us cannot be read by third parties.

5. Contact form

If you send us an enquiry via the form on the “Contact” page, we process the data you enter: name, email address, optionally phone number, project type, type of request and your message.

We use this data solely to handle your enquiry and reply to you. The legal basis is Art. 6(1)(b) GDPR where your enquiry aims at concluding a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Enquiries are stored in our database on the server in Germany mentioned above and are not passed on to third parties. We delete them once the enquiry has been fully handled and no contract results. If a contract is concluded, we keep the data for as long as statutory retention obligations (in particular under commercial and tax law) require.

6. Contact by email, WhatsApp or Instagram

You can also contact us by email (imashak4@gmail.com), via WhatsApp or Instagram. These services are only linked on our website, not embedded: merely visiting the website does not transmit any data to them. Only when you click such a link do you leave our website.

If you write to us through one of these channels, we process your message and contact details to reply (Art. 6(1)(b) or (f) GDPR). The respective providers also process your data under their own responsibility: Google Ireland Limited (Gmail) for email, Meta Platforms Ireland Limited for WhatsApp and Instagram. These providers may also transfer data to the USA; please refer to their privacy notices for details. If you do not want this, please use the contact form.

7. Web analytics with Plausible

To understand how our website is used, we use the open-source software Plausible Analytics. We host it ourselves on our server in Germany (stats.pilgrims.top); no data is transferred to third parties.

Plausible does not set cookies and does not store any information on your device. Your IP address is not stored: an identifier that changes daily and cannot be traced back is derived from the IP address and user agent, used only to count unique visits within one day. Only aggregated data is evaluated, such as pages visited, referrer, country, device type, browser and operating system. Individual persons cannot be identified.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving our website on the basis of anonymous usage statistics.

8. Cookies and local storage

We do not use cookies for analytics, marketing or tracking. Only technically necessary information is stored:

• “lang” (your browser’s local storage): the website language you selected. Kept until you delete it in your browser.
• “csrftoken” (cookie): a security token set when you submit the contact form, protecting against cross-site request forgery. Valid for one year.

This storage is strictly necessary for the function you requested and is therefore permitted without consent under Section 25(2) no. 2 of the German TDDDG; further processing is based on Art. 6(1)(f) GDPR.

9. Fonts

All fonts are loaded from our own server. There is no connection to servers of Google or other font providers.

10. Your rights

Within the statutory limits, you have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

An informal message to imashak4@gmail.com is sufficient for all of these requests.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

11. No automated decisions

We do not make decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.

12. Changes

We update this privacy policy when the website or legal requirements change. The version published here applies.