Privacy policy

This page explains what personal data is processed when you visit developermajd.com, why, and on what legal basis. In short: the site counts visits with a cookie-free analytics tool, shows no ads and sets no cookies that would need your consent.

Controller

The controller responsible for processing data on this website is:

Phone: +49 176 63637249
Email: majd@developermajd.com

Hosting and server logs

The site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, and delivered through Vercel’s global server network. Every time you open a page, Vercel processes data that your browser sends automatically:

• your IP address and the approximate location derived from it
• the date and time of the request
• the page or file requested
• the page you came from (referrer), if your browser sends it
• your browser, operating system and device (user agent)

This data is needed to deliver the site and keep it secure and stable, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure website that stays reliably available.

Vercel processes this data on my behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA in the process. Vercel is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). Vercel deletes or anonymises the data once it is no longer needed for these purposes. See Vercel’s privacy policy for details.

Every file on this site, fonts included, comes from Vercel. Your browser does not connect to Google Fonts or any other third party when you visit.

Visitor statistics

To see how many people visit the site and which pages they read, I use Vercel Web Analytics, a service of the same provider that hosts the site (Vercel Inc., address above). It sets no cookies and stores nothing on your device. It records the page visited, the referrer, your browser, operating system and device type, and your country. Visits are told apart by an anonymous value that is derived from the request and changes every day, so you cannot be recognised across days or across other websites. Your IP address is not stored.

The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is knowing whether the site is being read and which content is of interest. Vercel processes this data on my behalf under the same data processing agreement and the same EU-U.S. Data Privacy Framework certification as described under hosting. You can object to this processing at any time, see the right to object below.

Storage in your browser

For three convenience features, the site stores small entries in your browser. None of them contains an identifier that could be used to recognise you:

• theme (local storage): your choice of light or dark mode, once you use the switch. It stays until you clear this site’s data in your browser.
• intro-seen (session storage): notes that the welcome animation has already played, so it doesn’t play again on every page view. It is deleted when you close the tab.
• NEXT_LOCALE (cookie): the language you last picked with the language switch, so that your next visit opens in that language. Your browser sends it with every request to this site, and it expires after a year.

The first two never leave your browser. Storing and reading these entries is based on Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), because they are strictly necessary for features you ask for. No consent is required.

Contact by email or phone

If you email or call me, I process the details you give me (such as your name, email address, phone number and the content of your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at a contract with you, and Art. 6(1)(f) GDPR otherwise; my legitimate interest is answering enquiries.

My mailbox is run on my behalf by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. I delete your messages once they are no longer needed to handle your enquiry, unless a legal retention period requires me to keep them.

Booking a call with Calendly

The booking link takes you to Calendly. Calendly is not embedded in this site: your browser only connects to Calendly once you click the link.

If you book a call there, Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA, processes your details (such as your name, email address, the time you picked and any notes) on my behalf so that we can hold the call. The legal basis is the same as for contact by email: Art. 6(1)(b) or (f) GDPR. Calendly is certified under the EU-U.S. Data Privacy Framework. The Calendly site itself, including the cookies it uses, is covered by Calendly’s privacy notice.

Links to other websites

The site links to LinkedIn, GitHub and my projects, among others. These are plain links: no data is sent to those sites while you browse this one. Once you follow a link, the privacy policy of the site you land on applies.

Your rights

You have the right to:

• access the data I hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)

To use any of these rights, email me at majd@developermajd.com.

Right to object

Where I process data on the basis of Art. 6(1)(f) GDPR, you can object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then stop processing it, unless I can show compelling legitimate grounds that override your interests, or the processing is needed to establish, exercise or defend legal claims.

Right to lodge a complaint

You can complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.

Other information

The site is only served over an encrypted HTTPS connection. You are not obliged to provide any personal data, but without the connection data described under hosting, the site cannot be displayed. There is no automated decision-making or profiling.

Last updated: October 2026