Legal

Privacy policy

Last updated: 9 September 2026

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Muhammad Hamiz Ahmed (Dataotter)
Steinacher Strasse 21
90427 Nürnberg, Germany
Email: [email protected]

2. General information

2.1 Scope

We process personal data of visitors only where this is necessary to provide a working website, or where you actively send us data (for example by email or when booking a call). This website uses no analytics, tracking or marketing tools.

2.2 Legal bases

  • Art. 6 (1) (b) GDPR (contract or pre-contractual steps), e.g. enquiries and call bookings
  • Art. 6 (1) (f) GDPR (legitimate interest), e.g. secure and efficient delivery of the website
  • Art. 6 (1) (a) GDPR (consent), e.g. when you load the scheduler

2.3 Recipients

We use service providers to run the website (hosting, scheduling). They process data on our behalf (Art. 28 GDPR) or as independent controllers; see sections 3 and 5.

2.4 Retention

We keep personal data only as long as needed for the purpose in question or as required by statutory retention duties.

3. Hosting (Cloudflare)

This website is delivered as a static site through Cloudflare Pages. Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (EU representative: Cloudflare Germany GmbH, Rosental 7, 80331 Munich). When you visit, Cloudflare processes technically necessary data (server logs):

  • IP address, date and time of the request
  • page or file requested, referrer URL
  • browser type and version, operating system, status codes

Purpose: technical delivery, stability, security (including attack mitigation), error analysis.
Legal basis: Art. 6 (1) (f) GDPR.
Retention: Cloudflare keeps log data for a limited period only.
Third-country transfer: Cloudflare is certified under the EU-US Data Privacy Framework; EU standard contractual clauses apply in addition. We have a data processing agreement with Cloudflare. More: cloudflare.com/privacypolicy.

4. Contact by email

If you contact us by email, we process the details you provide (name, email address, message content) to handle your enquiry.

Legal basis: Art. 6 (1) (b) and/or Art. 6 (1) (f) GDPR.
Retention: until the enquiry is dealt with, and beyond that only where the law requires it.

5. Booking a call (Calendly)

We use Calendly to schedule calls. The scheduler is loaded only after you click “Show available times”; until then no data is sent to Calendly. By clicking, you consent to loading it (Art. 6 (1) (a) GDPR). You can also open Calendly in a new window via “Open in Calendly”.

When you use it, the data you enter (name, email, preferred time, any notes) and technical data (IP address) are sent directly to Calendly and processed there.

Provider: Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA.
Purpose: scheduling.
Legal basis: Art. 6 (1) (a) and (b) GDPR.
Third-country transfer: Calendly is certified under the EU-US Data Privacy Framework and additionally uses standard contractual clauses. Privacy policy: calendly.com/privacy.

6. Fonts

All fonts on this website are served from our own hosting. No connection is made to Google or any other font provider.

7. Cookies and local storage

This website sets no cookies for analytics, tracking or marketing. We use your browser’s local storage for exactly one entry: dataotter_cookie_consent remembers your choice in the notice banner so it does not reappear on every visit. It contains no personal data and is never sent to us.

Legal basis: § 25 (2) no. 2 TDDDG (technically necessary) together with Art. 6 (1) (f) GDPR. You can delete the entry in your browser settings at any time or change your choice via “Cookie settings” in the footer.

8. External links

This website links to external sites (including Medium, LinkedIn, GitHub, and our application Meistra at meistra.dataotters.io, which has its own privacy policy). When you follow a link you leave this website; the respective operator alone is responsible for data processing there.

9. Security (SSL/TLS)

This website uses TLS encryption, which protects data you send to us against unauthorised access in transit.

10. Your rights

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

12. Changes

We update this privacy policy when the legal situation or this website changes. The version published here applies.