Privacy policy

1. Controller

Koray Hergül
Hölderlinstraße 20/4
73614 Schorndorf – Germany
E-mail: koray@herguel.com

2. Purposes of processing

I process personal data solely to:
‍

• answer enquiries sent through my contact form or by e-mail
  
• secure and deliver the website (server logs handled by Cloudflare).

3. Data categories, legal basis & retention

Contact enquiries:

• Data collected: Name, e-mail address, message content, basic technical meta data (date, time, IP).
  
• Legal basis: Art. 6 (1) (b) GDPR – pre-contractual measures, or Art. 6 (1) (a) GDPR – consent.
• Retention: I erase the data six (6) months after my last reply, unless further correspondence is required.

Server & security logs (Cloudflare):

• Data collected: IP address, date/time, requested URL, browser info.
  
• Legal basis: Art. 6 (1) (f) GDPR – legitimate interest in keeping the site secure and functional.
• Retention: Logs are deleted automatically within ≤ 14 days.

4. Recipients

Personal data may be processed by:

• Cloudflare Inc. – CDN & security layer (data centres inside the EU when possible; Standard Contractual Clauses protect any extra-EU transfers).
  
• Webflow Inc. – form handler and CMS; stores form submissions until they are retrieved, then deletes them automatically.

5. Your rights

You may at any time request:

• access, rectification or erasure of your data.
  
• restriction of processing.
• data portability.
• objection to processing based on legitimate interest.
• withdrawal of consent without affecting earlier processing.

6. TLS encryption

This website uses SSL/TLS (https). Data in transit cannot be read by third parties.You may at any time request:

7. Automated decision-making

No automated decision-making or profiling takes place.

8. Changes to this Privacy Policy

Future functional changes may require updating this notice. The latest version is always available at korayherguel.com/privacy-policy.Last updated: 15 July 2025.