Privacy Policy

1. Controller

No data protection officer has been appointed because the legal requirements for doing so are not met. If you have any questions about data protection, please contact me directly using the details above.

2. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The provider operates the servers, a content delivery network and the email mailboxes of this domain, and processes data on my behalf.

A data processing agreement under Art. 28 GDPR is in place with the provider. Where data is processed outside the European Economic Area, the EU Commission’s standard contractual clauses apply.

Each time a page is requested, the server automatically records data in so-called log files:

• IP address of the requesting device
• date and time of access
• name and URL of the requested file
• amount of data transferred
• status of the request
• referring page, where transmitted
• browser type, browser version and operating system

This data is not merged with other data sources and is not used to identify you personally. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in delivering the website without technical errors and in defending against attacks.

The log files are overwritten and deleted automatically by the provider as soon as they are no longer needed for secure operation. They are only reviewed when there is a specific reason, such as a malfunction or an attack.

3. Encrypted transmission

This website uses SSL/TLS encryption. You can recognise this by the address bar of your browser, which shows https instead of http. Data you send to me cannot be read by third parties in transit.

4. Contact form

The button „Jetzt beraten lassen“ opens a dialog with a contact form on every page. If you use it, the following information is processed: your name, your phone number or email address, the text of your enquiry and your consent to processing. For technical reasons the time at which the form was opened and submitted is also recorded. This serves solely to block automated spam.

The information is not stored in the website’s database. It is sent to my mailbox as an email via my hosting provider’s mail server and handled there.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract or concerns pre-contractual measures. Otherwise the legal basis is your consent under Art. 6 (1) (a) GDPR and my legitimate interest in answering enquiries under Art. 6 (1) (f) GDPR.

You can withdraw your consent at any time with effect for the future. An informal email is sufficient. The lawfulness of processing carried out before the withdrawal remains unaffected.

5. Appointment booking

Using the booking calendar at the end of the pages Start, Leistungen and Referenzen, and in the dialog under „Termin“, you can book a free initial phone consultation. This uses scheduling software (Timetics by Arraytics Ltd.) that runs entirely on my own server. No data is transmitted to the software vendor or to any payment provider.

When you book, I process your name, email address, phone number, the chosen time slot and, if you provide it, a short description of your request. This information is stored in the website’s database so that the appointment can be managed, confirmed, rescheduled or cancelled. You receive a confirmation and a reminder by email shortly before the appointment.

The appointment, including your name and contact details, is also added to my Google Calendar so that I do not miss it. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the EU Commission’s standard contractual clauses apply.

The legal basis is Art. 6 (1) (b) GDPR, because the booking serves to initiate a contract. For the calendar entry it is also my legitimate interest in reliable appointment management under Art. 6 (1) (f) GDPR.

6. Email, phone and WhatsApp

If you contact me by email or phone, your details are processed to handle your request. The same legal bases apply as for the contact form. I do not pass your data on without your consent.

The website also contains a link to WhatsApp. If you use it, WhatsApp opens on your device and you write to me via WhatsApp Business. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. WhatsApp thereby learns your phone number, the time and the metadata of the communication. Message contents are end-to-end encrypted. The legal basis is Art. 6 (1) (b) GDPR and my legitimate interest in fast communication under Art. 6 (1) (f) GDPR. Which data WhatsApp itself processes is described in the WhatsApp privacy policy. If you prefer not to use WhatsApp, please use email, phone or the contact form.

7. Fonts

The font Inter is served from my own server. There is no connection to Google Fonts. No data is transmitted to third parties when the font is loaded.

8. Videos

Self-hosted videos

The short video loops on the start page and some of the work shown under „Referenzen“ are played from my own server. No data is transmitted to third parties.

YouTube

Some pieces of work and one customer testimonial are hosted on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

These videos are not loaded automatically. As long as you do not click a video, no connection to YouTube is established. You first see only a preview image that comes from my own server. Before the first video is loaded, the consent banner asks for your permission. If you do not give it, the video remains unloaded.

Only when you start a video is it loaded in privacy-enhanced mode via youtube-nocookie.com. At that moment YouTube learns, among other things, your IP address and which page you visited, and may store information on your device. If you are logged in to YouTube, your activity can be linked to your account. You can prevent this by logging out of your account before clicking.

The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) of the German TDDDG, which you give via the consent banner. Data may be processed outside the European Union, including in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy at policies.google.com/privacy.

9. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. I use it to understand how many people visit the site, how they arrive and which pages they view. This helps me improve the website.

Google Analytics is only loaded if you have given your consent via the consent banner. Without your consent, no data is transmitted to Google and no analytics cookies are set.

When analytics is active, Google sets cookies on your device. They contain a random identifier that allows your browser to be recognised on later visits and are valid for up to two years. Google Analytics 4 truncates your IP address before storing it and does not store full IP addresses. Data collected includes the pages viewed, time spent, approximate region, browser and device, and the source through which you reached the website.

The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. A data processing agreement under Art. 28 GDPR is in place with Google. Google may also process the data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the EU Commission’s standard contractual clauses apply. Data stored at user and event level is deleted by Google after no more than 14 months.

You can withdraw your consent at any time with effect for the future, most easily via the link Privatsphäre-Einstellungen (privacy settings). Further information is available in Google’s privacy policy and at support.google.com/analytics/answer/6004245.

10. Google AdSense

This website uses Google AdSense, an advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

AdSense is only loaded if you have given your consent via the consent banner. Without your consent, no ads are loaded, no data is transmitted to Google and no advertising cookies are set.

With your consent, your browser loads advertising code from Google. Google thereby learns your IP address and which page you are visiting, and sets cookies or similar technologies on your device. This allows Google to measure which ads you see and click, to limit how often an ad is shown, and to tailor ads to your interests, including across multiple websites (personalised advertising). If you are logged in to Google, Google can link this data to your account.

The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. For the selection and delivery of ads, Google processes the data under its own responsibility. Google may also process the data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the EU Commission’s standard contractual clauses apply.

You can withdraw your consent at any time with effect for the future, most easily via the link Privatsphäre-Einstellungen (privacy settings). You can additionally turn off personalised advertising in your Google account at adssettings.google.com. How Google uses data in advertising is described at policies.google.com/technologies/ads.

11. Cookies and consent banner

On its own, this website only sets cookies that are necessary for its operation. Because YouTube videos, Google Analytics and Google AdSense are integrated, which require consent, a consent banner is shown on your first visit.

The banner uses the software Real Cookie Banner by devowl.io GmbH. The software runs on this website’s own server. No data is transmitted to the manufacturer.

Your decision is stored so that you are not asked again on every page view. This includes a randomly generated identifier for your consent, the time, which services you accepted or declined, the version of the banner, and technical details about your browser and device. This information is stored in a cookie in your browser (valid for one year) and is also documented on the server as proof of consent.

The legal basis for storing the proof is Art. 6 (1) (c) GDPR in conjunction with the accountability obligation under Art. 7 (1) GDPR. For the cookie itself it is Section 25 (2) no. 2 TDDDG, because it is strictly necessary for the function you requested.

You can change or withdraw your decision at any time via the link Privatsphäre-Einstellungen, available here and at the bottom of every page.

12. Google reviews

The start page shows the rating of my Google Business Profile. My server retrieves this value from Google at regular intervals and caches it. Your browser does not connect to Google for this, and no data about you is transmitted. The linked reviews themselves are hosted by Google, where Google’s privacy policy applies.

13. External links and social networks

In a few places the site links to external pages, for example my profiles on Instagram and LinkedIn, WhatsApp, reviews on Google or YouTube. These are plain links, not embedded content. No data is transmitted to these providers when you visit this website. As soon as you follow such a link, the privacy policy of the respective provider applies. I have no influence on the processing that takes place there.

14. Retention

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention period prevents deletion. Enquiries and appointment bookings that do not lead to an order are deleted no later than six months after the last contact. Documents relating to an order are subject to the retention periods under German commercial and tax law of up to ten years.

15. Your rights

You have the following rights towards me:

• access to the data stored about you under Art. 15 GDPR
• rectification of inaccurate data under Art. 16 GDPR
• erasure under Art. 17 GDPR
• restriction of processing under Art. 18 GDPR
• data portability under Art. 20 GDPR
• objection to processing under Art. 21 GDPR
• withdrawal of consent under Art. 7 (3) GDPR

Right to object: Where I process data on the basis of a legitimate interest under Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests.

For any of these requests, an informal message to info@fuadyanik-mediendesign.de is sufficient.

16. Complaints to a supervisory authority

If you believe that the processing of your data violates the GDPR, you may lodge a complaint with a supervisory authority. The authority responsible for me is:

17. Changes to this policy

This policy will be updated whenever the website or the legal situation changes. The version published here applies.

Last updated: 19 August 2026