Privacy Policy

1. Responsible Party

Mert Sahin

Taunusstraße 25

60329 Frankfurt am Main

Germany

Email: hi@mertsahin.de

Phone: +49 1522 4698852

2. Contact Form: Data Collection

If you use the contact form on this website, the following personal data will be collected and processed:

• — First and last name
• — Email address
• — Your message / project description
• — How you found me (optional, including an optional free-text note)
• — Your IP address (technically necessary to limit abusive repeat requests; not stored permanently)

This data is used solely to respond to your enquiry and to get in touch with you. Beyond the processors named in section 5, it is not passed on to any third party.

3. Legal Basis

The processing of your data via the contact form takes place on the basis of your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. An informal message to the email address given in section 1 is enough.

If the processing is necessary for the performance of pre-contractual measures or to fulfill a contract, it is based on Art. 6 Para. 1 lit. b GDPR.

4. Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. Vercel is EU-US Data Privacy Framework certified. When our website is accessed, technical data (e.g. IP address, browser type, date and time of access) is automatically collected by the hosting provider to ensure the operation of the website. Vercel derives the country of origin from the IP address. We evaluate it at the moment of the request in order to block access from a small number of countries where we do not take on work, and we do not store it.

Data processing by Vercel is based on our legitimate interest in the secure and efficient operation of the website (Art. 6 Para. 1 lit. f GDPR). Further information: vercel.com/legal/privacy-policy.

5. Email Delivery via Resend

To deliver the messages sent through the contact form, we use the email service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The form data is processed through a dedicated API on our hosting at Vercel and delivered exclusively by email — to us, and as a confirmation of receipt to you. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend; the transfer to the USA is safeguarded by Standard Contractual Clauses (Art. 46 GDPR). Further information: resend.com/legal/privacy-policy.

6. Analytics with Plausible Analytics

This website uses Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia). Plausible Analytics is a privacy-friendly alternative to Google Analytics:

• — No cookies are set
• — No IP addresses are stored
• — No cross-site tracking
• — All data is aggregated anonymously
• — No cookie banner required

The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest). Further information: plausible.io/data-policy.

7. Cookies and Local Storage

This website does not use marketing or tracking cookies. It uses only three browser stores: local storage for your language preference (German or English), session storage for your scroll position so that going back returns you to the same spot, and a cache created by a service worker. That cache keeps the pages you have visited and the files they need (images, fonts, scripts and styles) so the site loads faster and stays usable on a broken connection. None of these stores contains personal data, all of them serve only the display and operation of this website, and all can be cleared at any time in your browser settings. Session storage also clears itself as soon as you close the tab. A cookie banner is therefore not required.

8. Your Rights

Under the GDPR, you have the following rights:

• — Right of access (Art. 15 GDPR)
• — Right to rectification (Art. 16 GDPR)
• — Right to erasure ('Right to be forgotten', Art. 17 GDPR)
• — Right to restriction of processing (Art. 18 GDPR)
• — Right to data portability (Art. 20 GDPR)
• — Right to object (Art. 21 GDPR)
• — Right to withdraw given consent (Art. 7 Para. 3 GDPR)

To assert your rights, please contact: hi@mertsahin.de.

You also have the right to lodge a complaint with the competent supervisory authority. In Hesse, this is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden.

9. Retention Period

Your data transmitted via the contact form will only be stored for as long as is necessary to process your request, or as long as statutory retention periods exist. Once the purpose of the storage no longer applies, the data will be deleted.

10. Updates to this Privacy Policy

This privacy policy is currently valid and was last updated in June 2026. Due to changed legal or regulatory requirements, it may become necessary to adapt this privacy policy.