Privacy notice
1. Controller
The controller responsible for processing personal data on this website is:
Mohamad Abou AlnaserFreiherr-vom-Stein-Straße 17
36179 Bebra
Deutschland
E-Mail: mohamad@aboualnaser.com
No data protection officer has been appointed.
2. General information
Protecting personal data matters to me. Personal data is processed only where necessary to provide and secure this website or to handle contact initiated by a visitor.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
3. Hosting by Vercel
This website is hosted using the infrastructure of Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA.
Accessing the website involves processing technical connection data. This may include IP address, access date and time, the page or file requested, referrer URL, browser type and version, operating system and device information.
Processing serves to deliver the website and maintain its stability and security. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is to provide a secure, stable and technically reliable website.
Data is processed or retained only for as long as necessary for these technical and security purposes. Specific retention periods set by the hosting provider depend on its technical and contractual settings.
Vercel is based in the USA, so personal data may be processed outside the European Union or the European Economic Area. Vercel states that it participates in the EU-U.S. Data Privacy Framework. Depending on the processing, further appropriate safeguards for international data transfers may also be used.
4. Contact by email
When visitors contact me by email, the personal data included in the message is processed. This includes the email address, any name provided and the message content. Processing serves to handle and respond to the enquiry.
Where communication concerns a possible professional role or employment relationship, processing serves in particular to take pre-contractual steps under Article 6(1)(b) GDPR. Other enquiries are processed on the basis of my legitimate interest in handling incoming communication under Article 6(1)(f) GDPR.
Email links open the visitor’s email application. The website itself does not receive contact form data. Zoho Mail with European mail servers is used to deliver messages to the contact mailbox. The email service processes the data needed to deliver and make messages available.
Data is deleted when it is no longer needed to handle the enquiry and there are no statutory or other legitimate grounds for further retention.
5. Local resources and interactive work samples
Fonts and images are served through this website. No external videos or social media content are embedded when pages load. No analytics or marketing tracking scripts are used.
Interactive demonstrations and JSON response validation run locally in the browser. Inputs are not sent to an AI service or another backend and are not stored persistently. They remain only in the memory of the current browser view and are lost when the page reloads.
6. Cookies and browser storage
The website itself does not set cookies or use localStorage or sessionStorage to store visitor information. No technologies for analysing visitor behaviour or for marketing purposes are integrated.
7. Your data protection rights
Subject to the statutory requirements, you have in particular the following rights:
- Right of access under Article 15 GDPR
- Right to rectification under Article 16 GDPR
- Right to erasure under Article 17 GDPR
- Right to restriction of processing under Article 18 GDPR
- Right to data portability under Article 20 GDPR
- Right to object under Article 21 GDPR
8. Consent and complaints
Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to complain to a competent data protection supervisory authority. You can use the contact details above to exercise your rights.
9. External links
This website contains links to external websites and profiles. A connection to the external provider is established only when you open a link. The respective provider is generally responsible for the processing of personal data on its website.
