LegalLast updated: 7 November 2026
Privacy policy
1. Controller
The controller for the processing of personal data on this website is Ertugrul Karazor, ErtuKara Webdesign, Schonnefeldstraße 114, 45326 Essen, Germany, email: ertugrul@ertukara.com, phone: +49 172 9306813. No data protection officer is appointed, as the legal requirements for one are not met.
2. Which data is processed
When you visit the website, technical access data: IP address, date and time, the page requested, the amount of data transferred, browser and operating system, the page you came from. When you use the contact form, what you enter: name, email address, optionally a phone number and a time window for a callback, your message and optionally the address of your website.
3. Purposes and legal basis
Access data serves the secure and reliable operation of the website (Art. 6(1)(f) GDPR). The details from the contact form are used to answer your enquiry and to make you an offer (Art. 6(1)(b) GDPR, pre-contractual steps at your request). This website does not analyse your behaviour and uses no analytics, tracking or marketing tools.
4. Hosting (Netlify)
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify processes the access data named in section 2 in server log files to deliver the pages and to fend off attacks. A data processing agreement under Art. 28 GDPR is in place with Netlify; transfers to the USA rest on the EU Commission's standard contractual clauses and Netlify's certification under the EU-US Data Privacy Framework. Netlify's privacy notice: netlify.com/privacy.
5. Content delivery network and security (Cloudflare)
The website is delivered through Cloudflare's network. For users in the European Economic Area the provider is Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany; the technical operation is carried out by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your request is routed through Cloudflare's servers, which process technical access data, in particular your IP address, to deliver the pages quickly and to fend off attacks. Cloudflare may set one technically necessary cookie ("__cf_bm") for this. The legal basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare; transfers to the USA rest on the standard contractual clauses and Cloudflare's certification under the EU-US Data Privacy Framework. Privacy notice: cloudflare.com/privacypolicy.
6. Contact form and email
When you send the form, a server-side function of our hosting provider Netlify receives your details and delivers them to me by email. The email is sent through Zoho Mail, operated by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, on servers in the European Union. Your details are used only to answer your enquiry and are not passed on to third parties. The form contains an invisible field against automated input; if it is filled in, nothing is sent. If you email me directly, the same applies to the content of your message.
7. Cookies and local storage
This website sets no cookies of its own. The only cookie may come from Cloudflare ("__cf_bm", section 5) and is technically necessary for operation. If you choose a language with the switch, your browser remembers that choice in its local storage; it never leaves your device. No consent banner is therefore needed.
8. Recipients and international transfers
Recipients are the providers named above: Netlify (hosting and the form function, USA), Cloudflare (delivery and security, USA and Germany) and Zoho (email, EU). Where data reaches the USA, this rests on the EU Commission's standard contractual clauses and the providers' certification under the EU-US Data Privacy Framework. Data is not passed on for advertising.
9. Retention
Server log files are deleted by the hosting providers after a short time. Enquiries by form or email are kept while they are being handled; if no contract follows, I delete them after six months at the latest. If a contract follows, the statutory retention periods under commercial and tax law apply.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Write to ertugrul@ertukara.com. You also have the right to lodge a complaint with a supervisory authority, for example the Data Protection Commissioner of North Rhine-Westphalia.
11. Security and changes
The website is delivered over HTTPS only. I update this policy when the website's technology or the legal situation changes; the version published here applies.