Legal
Datenschutzerklärung
Last updated: September 9, 2026.
Privacy policy pursuant to Art. 13 GDPR (Datenschutz-Grundverordnung).
1. Who Is Responsible
The person responsible for data processing on this website is:
Saltuk Bugra Karacan
Munich, Germany
Email: [email protected]
2. What Data Is Collected
Contact form
When you use the contact form on this website, the following data is collected:
- First and last name
- Email address
- Company name (optional)
- Project type and budget range
- Your message
- Date and time of submission
This data is transmitted to us by email and stored in our system solely for the purpose of processing your enquiry.
Server log files
The website host automatically collects and stores information in server log files that your browser automatically transmits. These are: browser type and version, operating system, referrer URL, hostname of the accessing computer, and time of the server request. This data cannot be attributed to specific persons.
3. Purpose and Legal Basis of Processing
Contact form data is processed exclusively to respond to your enquiry and, where applicable, to initiate a contractual relationship. The legal basis is Art. 6(1)(b) GDPR (processing necessary for the performance of a contract or pre-contractual measures).
For server log files the legal basis is Art. 6(1)(f) GDPR (legitimate interest in ensuring the technical operation and security of the website).
4. Retention Periods
Contact form submissions are deleted after 6 months unless there is an ongoing business relationship or legal obligation to retain them longer. Server log files are deleted automatically after 7 days.
5. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) - you can request a copy of the data we hold about you.
- Right to rectification (Art. 16 GDPR) - you can ask us to correct inaccurate data.
- Right to erasure (Art. 17 GDPR) - you can ask us to delete your data.
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR) - you can request your data in a machine-readable format.
- Right to object (Art. 21 GDPR) - you can object to processing based on legitimate interests.
To exercise any of these rights, please contact: [email protected]
6. Third-Party Services
Cloudflare (CDN, security and web analytics)
This website is delivered through Cloudflare, Inc. (USA). Cloudflare provides the content delivery network (CDN), DNS and TLS encryption and protects the site against abuse. As a result, when you view a page your IP address, browser information and the address you requested pass through Cloudflare's infrastructure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely and efficiently).
Cloudflare Web Analytics is also used for visitor statistics. This tool sets no cookies, writes no data to your browser, accesses no data stored on your device and creates no fingerprint. It measures only aggregate figures such as page views, referrer, country, device class and page-load time; no user profiles are built and no cross-site tracking takes place. Because nothing is stored on and nothing is read from your terminal equipment, no consent under § 25 TDDDG is required; the legal basis is Art. 6(1)(f) GDPR.
A data processing agreement under Art. 28 GDPR has been concluded with Cloudflare. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the EU standard contractual clauses apply in addition. For details, see cloudflare.com/privacypolicy.
Brevo (Newsletter)
If you subscribe to the newsletter, your email address and name are stored with Brevo (Sendinblue SAS, France) for the purpose of sending the newsletter. Subscription requires double opt-in as required by German law. You can unsubscribe at any time via the link in any newsletter email. See brevo.com/legal/privacypolicy. The legal basis is Art. 6(1)(a) GDPR (consent).
Calendly (Booking)
For booking appointments, this website uses Calendly. When you book a meeting, your name, email address, and chosen time slot are processed by Calendly LLC (USA). See calendly.com/privacy for their privacy policy. The legal basis is Art. 6(1)(b) GDPR (processing for a pre-contractual measure).
7. Contact for Data Requests
For all questions and requests relating to data protection, please contact: [email protected]
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Bavaria, Germany is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany