Privacy Policy

1. Controller

Hüseyin Ugurel
creavoid
Eickener Str. 115
41063 Mönchengladbach
Email: [email protected]

2. Overview of Data Processing

The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects concerned.

Types of Data Processed

  • Inventory data (e.g., names, addresses)
  • Content data (e.g., form inputs)
  • Contact data (e.g., email addresses)
  • Meta/communication data (e.g., device information, IP addresses)
  • Usage data (e.g., pages visited, access times)

3. Legal Bases

Below is an overview of the legal bases under the GDPR on which we process personal data:

  • Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
  • Contractual performance (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract or pre-contractual measures.
  • Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party.

4. Security Measures

We take appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling access to data and ensuring encryption during data transmission (SSL/TLS).

5. Hosting

Our hosting provider processes the following data on our behalf: content data, usage data, meta/communication data, and contact data.

Vercel

We use Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA as our hosting provider. You can find Vercel's privacy policy at: https://vercel.com/legal/privacy-policy

6. Contact

When you contact us (e.g., via email or contact form), the information provided by you is processed insofar as it is necessary to respond to your inquiry and any requested actions.

  • Data processed: Inventory data, contact data, content data
  • Data subjects: Communication partners
  • Legal basis: Contractual performance and pre-contractual inquiries (Art. 6(1)(b) GDPR), Legitimate interests (Art. 6(1)(f) GDPR)

7. Web Analytics (Google Analytics 4)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyze how visitors use our website.

Data Processing

Google Analytics collects the following data: IP address (anonymized), pages visited, time of visit, duration of visit, browser type, operating system, referrer URL, and device information. This data is used to evaluate website usage, compile reports on website activity, and provide other services related to website activity and internet usage.

Legal Basis

The use of Google Analytics is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.

Opt-Out

You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on. You can also adjust your cookie settings in your browser to reject cookies.

For more information about Google's data processing, see Google's privacy policy: https://policies.google.com/privacy

8. Content Delivery Network (Cloudflare)

We use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare") as our DNS provider and Content Delivery Network (CDN). When you access our website, your request is routed through Cloudflare's global network for security and performance purposes.

Data Processing

Cloudflare processes technical connection data including your IP address, the requested URL, HTTP headers, and timestamps. This is necessary to deliver the website content and protect against DDoS attacks and other security threats.

Legal Basis

The use of Cloudflare is based on our legitimate interests (Art. 6(1)(f) GDPR) in a secure and efficient delivery of our website.

For more information, see Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

9. Your Rights

As a data subject, you have the following rights under the GDPR, in particular under Articles 15 to 21:

  • Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your data for reasons arising from your particular situation.
  • Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent given at any time.
  • Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and to access that data.
  • Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data or the completion of your data.
  • Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your data.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

10. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements, or to implement changes to our services. The new privacy policy will apply to your next visit.

Last updated: May 2026