Privacy policy

This Privacy Policy explains how personal data is processed when you visit this website.

Personal data means any information relating to an identified or identifiable individual, such as an IP address, device information or online identifiers.

The controller responsible for data processing on this website is:

Arian Atmar

Freelance Web Designer
Rhönstraße 2
63450, Hanau
Germany

Email: hello@arianatmar.com

This website is hosted by:

Vercel Inc.

United States

When you access this website, Vercel may process technical information required to deliver and secure the website. This may include:

• IP address
• Date and time of access
• Requested page or file
• Referrer URL
• Browser type and version
• Operating system
• Device information
• HTTP status code
• Server and security logs

This processing is necessary to provide the website, maintain its technical stability, prevent misuse and protect it against attacks.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable and efficient operation of this website.

Vercel may process data in the United States and other countries. Where personal data is transferred outside the European Economic Area, the transfer is protected through appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses, where applicable.

Further information is available in the Vercel Privacy Notice.

This website does not use a contact form. If you contact me by email, the information you provide, including your email address and the content of your message, will be processed to respond to your enquiry.

If your enquiry relates to a potential or existing contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, processing is based on Article 6(1)(f) GDPR, with the legitimate interest of responding to communications addressed to me.

Your information will be retained for as long as necessary to process your enquiry and will subsequently be deleted unless statutory retention obligations or other legal grounds require longer storage.

Please note that clicking an email link may open an external email application or service. The processing performed by your email provider is governed by that provider’s own privacy policy.

This website uses cookies and similar technologies.

Some technologies are technically necessary for the operation, security or consent management of the website. Other technologies are used for analytics, user behaviour analysis and marketing purposes.

Technically necessary technologies may be used on the basis of Section 25(2) TDDDG and Article 6(1)(f) GDPR.

Non-essential technologies, including Google Analytics, Microsoft Clarity and Meta Pixel, are activated only after you provide consent. Their use is based on Section 25(1) TDDDG and Article 6(1)(a) GDPR.

You can accept or reject non-essential technologies through the cookie banner. You may change or withdraw your consent at any time by selecting “Cookie Settings” in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Detailed information about the technologies currently used, their providers, purposes and storage periods is available through the Cookie Settings panel.

This website uses Vercel Web Analytics, a website analytics service provided by Vercel Inc.

Vercel Web Analytics is used to understand general website usage, including page views, referring websites, approximate geographic region, browser, operating system and device type.

According to Vercel, Web Analytics does not use cookies and does not create profiles that track visitors across different websites. Visitors are identified using a hash generated from the incoming request. This identifier is automatically reset and is not intended to identify individual visitors.

The processing is based on Article 6(1)(f) GDPR. The legitimate interest is understanding the general performance and use of this website while using a privacy-focused analytics solution.

No personal information, email addresses or other directly identifying information is intentionally included in custom events, URLs or query parameters.

Further information is available in the Vercel Web Analytics privacy documentation.

With your consent, this website uses Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps measure and understand how visitors interact with the website. The processed information may include:

• Pages visited
• Time and duration of visits
• Approximate location
• Referring website
• Browser and device information
• Operating system
• Interaction and event data
• Online identifiers and cookie identifiers

Google Analytics is configured so that it is not activated before you provide consent.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through Cookie Settings.

Google may also process data in the United States. Appropriate safeguards for international transfers may include the EU-US Data Privacy Framework and Standard Contractual Clauses.

User-level and event-level data is retained in accordance with the retention settings configured for this Google Analytics property and is deleted when the applicable retention period expires.

Further information is available in the Google Privacy Policy and the Google Analytics data protection information.

With your consent, this website uses Microsoft Clarity, a behavioural analytics service provided by:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

Microsoft Clarity helps analyse how visitors use the website through features such as heatmaps, interaction statistics and session recordings.

Clarity may process information such as:

• Mouse movements and clicks
• Scrolling behaviour
• Pages visited
• Time spent on pages
• Browser and device information
• Approximate location
• IP address
• Pseudonymous identifiers
• Technical and interaction data

The purpose of this processing is to understand usability, identify technical or design issues and improve the user experience.

Microsoft Clarity is not activated before you provide consent. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through Cookie Settings.

Microsoft may process data outside the European Economic Area, including in the United States. Appropriate safeguards may include the EU-US Data Privacy Framework and Standard Contractual Clauses.

Clarity recordings are generally retained for 30 days. Heatmaps and certain labelled or saved sessions may be retained for longer periods in accordance with Microsoft’s current retention policy.

Further information is available in the Microsoft Privacy Statement and the Microsoft Clarity documentation.

With your consent, this website uses the Meta Pixel provided by:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

The Meta Pixel is used to measure the effectiveness of advertising, understand how visitors interact with this website, create aggregated reports and, where applicable, display more relevant advertising on Meta platforms such as Facebook and Instagram.

The processed information may include:

• Pages visited
• Interactions and events
• Referring URL
• Browser and device information
• IP address
• Cookie and advertising identifiers
• Information about whether an advertising campaign resulted in a website visit or interaction

If you are logged into a Facebook or Instagram account, Meta may associate information collected through the Pixel with your account.

The Meta Pixel is not activated before you provide consent. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through Cookie Settings.

Meta may process data in the United States and other countries outside the European Economic Area. Appropriate safeguards may include the EU-US Data Privacy Framework and Standard Contractual Clauses.

The extent, purpose and duration of further processing performed by Meta are determined by Meta in accordance with its own policies.

Further information is available in the Meta Privacy Policy.

Personal data may be disclosed to technical service providers where necessary to operate, secure and analyse this website.

These recipients may include:

• Hosting and infrastructure providers
• Analytics providers
• Consent-management providers
• IT and security service providers
• Public authorities, where disclosure is required by law

Service providers acting on my behalf are engaged in accordance with applicable data protection requirements.

Personal data is not sold.

Some service providers used by this website are based in, or process data in, countries outside the European Economic Area.

Where required, international data transfers are protected through appropriate safeguards under Articles 44 to 49 GDPR. These may include:

• An adequacy decision by the European Commission
• Participation in the EU-US Data Privacy Framework
• Standard Contractual Clauses approved by the European Commission
• Additional technical and organisational safeguards

Further information about applicable safeguards may be requested using the contact details provided above.

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy.

The applicable retention period depends on the type of data, the service used, consent settings and statutory retention obligations. Data is deleted or anonymised when it is no longer required, unless continued storage is required by law.

Where processing is based on consent, the relevant processing will stop after consent is withdrawn, unless another legal basis permits continued processing.

Under the GDPR, you may have the following rights:

• Right of access under Article 15 GDPR
• Right to rectification under Article 16 GDPR
• Right to erasure under Article 17 GDPR
• Right to restriction of processing under Article 18 GDPR
• Right to data portability under Article 20 GDPR
• Right to object under Article 21 GDPR
• Right to withdraw consent under Article 7(3) GDPR
• Right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR

If processing is based on Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation.

To exercise your rights, contact: hello@arianatmar.com

You have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for the controller’s location is:

The Hessian Commissioner for Data Protection and Freedom of Information
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Website: https://datenschutz.hessen.de

You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful loss, alteration, disclosure or access.

This website uses encrypted HTTPS communication. However, no method of internet transmission or electronic storage can guarantee absolute security.

This Privacy Policy may be updated if the website, the services used or the applicable legal requirements change.

The version published on this website at the time of your visit applies.