Privacy Policy

1. Data Controller

The data controller responsible for data processing on this website is:

2. Overview of Data Processing

This website is a personal blog that collects minimal data. The following types of data may be processed:

• Server log files (automatically collected by the hosting provider)
• Anonymous analytics data via Umami (no personal data, no cookies)

3. Server Log Files

The hosting provider of this website automatically collects and stores information in server log files, which your browser automatically transmits. This includes:

• Browser type and version
• Operating system
• Referrer URL (the previously visited page)
• IP address (anonymized)
• Date and time of access
• Requested pages

Legal basis: This data is processed based on legitimate interest (Art. 6 para. 1 lit. f GDPR) to ensure website security and stability. This data is not combined with other data sources and is automatically deleted after 30 days.

4. Analytics (Umami)

This website uses Umami, a privacy-friendly web analytics service. Umami is designed to be GDPR compliant by default and does not use cookies or collect any personal data.

What data is collected?

Umami collects only anonymous, aggregated data:

• Pages visited (without identifying individual visitors)
• Approximate geographic location (country level only)
• Device type (desktop/mobile) and browser
• Referral sources

What is NOT collected?

• No cookies are set
• No personal information
• No IP addresses (not even temporarily)
• No cross-site or cross-device tracking
• No fingerprinting

Legal basis

Legitimate interest (Art. 6 para. 1 lit. f GDPR): Since Umami does not process personal data and is fully privacy-compliant, no consent is required. This aligns with the GDPR principle of data minimization.

Data processing location

Analytics data is processed by Umami Cloud. Umami is committed to privacy and does not share, sell, or use your data for advertising purposes.

5. Cookies and Local Storage

This website does not use cookies.

We use local storage only to remember your preference for dismissing the privacy notice badge. This is stored only in your browser and is not transmitted to any server.

No tracking cookies, no advertising cookies, and no third-party cookies are used on this website.

6. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access (Art. 15): You can request information about the personal data processed about you.
• Right to rectification (Art. 16): You can request correction of inaccurate data.
• Right to erasure (Art. 17): You can request deletion of your personal data under certain conditions.
• Right to restriction (Art. 18): You can request restriction of data processing under certain conditions.
• Right to data portability (Art. 20): You can request to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): You can object to data processing based on legitimate interest at any time.

Note: Since we do not collect personal data through analytics, most of these rights apply only to server log data retained by our hosting provider.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Germany, you can contact the data protection authority of the federal state where you reside or where the alleged violation occurred.

8. Data Retention

• Server logs: 30 days
• Analytics data: Aggregated only, no personal data retained
• Local storage preference: Stored in your browser until you clear it

9. Contact for Data Protection

For any questions regarding data protection or to exercise your rights, please contact:

Email: shervindavarifard@gmail.com

10. Changes to This Policy

This privacy policy may be updated to reflect changes in data processing practices or legal requirements. The date of the last update is shown at the top of this page.