Privacy policy

Controller

The controller for data processing on this website is Alireza Rastineh, email: contact@alirezarastineh.me.

Hosting and server logs

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Nuremberg.

For every request the web server automatically records: IP address, date and time, the address requested, the referrer, browser and operating system (user agent) and the response status. This is used to keep the site secure and to fix faults, and is deleted after 14 days.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is operating the website securely and reliably.

Contact form

When you write to me through the contact form, I store your name, email address, message and the page language in order to reply. To prevent abuse I also store a salted hash of your IP address, from which the address cannot be recovered — not the address itself.

The message is delivered to me by the email service Resend (Resend, Inc., USA), which transfers your name, email address and message to the USA. The transfer is safeguarded by the European Commission's standard contractual clauses.

Stored messages are deleted after 180 days at the latest. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR.

Analytics with Umami

To understand which pages are read, I use Umami. It runs on my own server; no data is shared with third parties. Umami sets no cookies and stores no IP addresses. It records only aggregate information: the page visited, referrer, browser, operating system, device type and country.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is improving the website based on how it is used.

Error monitoring with Sentry

If a technical error occurs, an error report is sent to Sentry (Functional Software, Inc., USA) and stored in the EU (Frankfurt). It contains the error message, the page concerned, and the browser and operating system; IP addresses are not stored. As Sentry is a US company, access from the USA cannot be ruled out; it is safeguarded by the European Commission's standard contractual clauses.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a website that works.

Cookies

When you switch language, this website sets one cookie, “portfolio-lang”. It stores only the language you chose, so your next visit opens in that language, and expires after one year. It is required for this function you asked for (§ 25(2) no. 2 TDDDG). Other cookies are set only by the admin area, and only for the site owner.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Write to contact@alirezarastineh.me to exercise them.

You may also lodge a complaint with a data protection supervisory authority, for example the one where you live.