Privacy Policy.
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
Berat Özkan, Eckbornstraße 11, 65207 Wiesbaden, Germany
Email: berat@özkan.dev
2. Hosting
This website is hosted by Railway Corp. (548 Market St, San Francisco, CA, USA). When the site is accessed, the host processes technically necessary data (IP address, date and time of access, page requested, user agent) in order to deliver the website and ensure the security of operations. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). A data processing agreement is in place with Railway; the transfer to the USA takes place on the basis of the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
3. Cookies and Consent
Technically necessary storage (e.g. your cookie choice in the "oz_consent" cookie and the selected color scheme) is based on Section 25(2) TDDDG (German Telecommunications-Telemedia Data Protection Act). Statistics and marketing technologies (Google Analytics 4, Google Ads) are only set with your explicit consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can change or withdraw your choice at any time via the "Cookie settings" link in the footer.
4. Google Consent Mode
I use Google Consent Mode (v2) in advanced mode. The Google tag is executed as soon as the page loads; however, the storage of and access to information on your device (cookies, identifiers) is disabled by default ("denied") and is only enabled after your consent. Even without your consent, the Google tag transmits anonymous, cookieless signals ("pings") to Google. These signals contain no identifier stored on your device and no cookie; what is transmitted is technical information your browser sends on every page request anyway (e.g. IP address, page requested, time, consent status). Google uses these signals solely for statistical modelling. Because no information is stored on or read from your device for this purpose, Section 25 TDDDG is, according to the prevailing view, not applicable here; the legal basis for processing the resulting data (in particular the IP address) is my legitimate interest in data-minimising reach and conversion measurement (Art. 6(1)(f) GDPR). A transfer to the USA cannot be ruled out; it takes place on the basis of the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. You can object to this processing at any time via the cookie settings.
5. Google Analytics 4
Provided you have given consent, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse the use of the website. By default, the IP address is not stored permanently by Google Analytics 4 and is processed only in truncated or coarsely localised form. Without your consent, Google Analytics sets no cookies and reads no identifiers; no recognition takes place (Consent Mode v2, default "denied") — for the anonymous, cookieless signals see section 4. The legal basis is your consent (Art. 6(1)(a) GDPR). The storage period at user and event level is limited to 14 months in the Google Analytics settings. A transfer to the USA cannot be ruled out; it takes place on the basis of the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. You can withdraw your consent at any time via the cookie settings.
6. Microsoft Clarity
Provided you have consented to the "Statistics" category, I use Microsoft Clarity, an analytics service of Microsoft Corporation (One Microsoft Way, Redmond, WA, USA). Clarity records interactions with the website in pseudonymised form (e.g. mouse movements, clicks, scrolling) and uses these to create session replays and heatmaps in order to improve usability. Entries in form fields are masked by default and are not recorded. Clarity sets cookies or similar identifiers for this purpose. Without your consent, Clarity is not loaded and no data is collected. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to the USA cannot be ruled out; it takes place on the basis of the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. You can withdraw your consent at any time via the cookie settings.
7. Google Ads
Provided you have consented to the "Marketing" category, I use Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads sets cookies or similar identifiers to measure the success of my ads (conversion tracking) and, where applicable, to show you ads again (remarketing). The relevant consent signals are ad_storage (storing/reading advertising identifiers), ad_user_data (transmitting advertising-related user data to Google) and ad_personalization (personalised advertising). Without your consent these signals are set to "denied" and no advertising cookies are set or read. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to the USA cannot be ruled out; it takes place on the basis of the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework (Google LLC is certified under the Data Privacy Framework). You can withdraw your consent at any time with effect for the future via the cookie settings.
8. Contact Form / Website Preview (Lead Form)
If you contact me via the "Free Website Preview" form, I process the data you provide (name, company, email address, phone number and your answers from the questionnaire) in order to handle your request and create a preview for you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). For internal processing, the data is transmitted to a private Discord channel (Discord Netherlands BV / Discord Inc., USA) and optionally stored in a Google spreadsheet (Google Ireland Limited). The data is deleted as soon as it is no longer required for processing and no statutory retention obligations apply.
9. Contact by Email
If you contact me by email, your details will be stored in order to handle the request and for follow-up questions (Art. 6(1)(b) or (f) GDPR).
10. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
11. Last updated
June 2026