Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Kevin Moseri
Email: [email protected]
Website: kevinmoseri.com
Contact form: kevinmoseri.com/contact/

Personal data are processed only where this is necessary for the technical operation and security of this website, to respond to enquiries, or to comply with legal obligations. Processing for other purposes takes place only where a valid legal basis exists.

This website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. When the website is accessed, technically necessary access data may be processed, including the IP address, date and time of access, requested resource, amount of data transferred, referrer URL, browser and operating-system information, and status or error codes.

This processing is carried out to provide the website securely, reliably and efficiently and to detect and prevent misuse on the basis of Article 6(1)(f) GDPR. The legitimate interest is the secure and functional operation of the website. Log data are deleted when they are no longer required for these purposes, unless a statutory retention requirement or a specific security incident justifies longer retention.

Cloudflare is used for DNS, security and delivery functions. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; for services in the European Economic Area, Cloudflare, Inc. or the relevant Cloudflare entity may process personal data. This may include IP addresses, device and browser information, requested URLs, and security and connection data.

The processing serves the secure and reliable delivery of the website, in particular protection against abusive access and technical delivery. The legal basis is Article 6(1)(f) GDPR. Where data are transferred to third countries, such transfers are made on the basis of the applicable safeguards under Chapter V GDPR, including an adequacy decision where applicable or appropriate contractual safeguards.

If you contact me through the contact form or by email, the information you provide is processed. For the contact form this normally includes your name, email address, subject and message. The information is used only to handle and respond to the enquiry and for related follow-up communication.

If your enquiry relates to entering into or performing a contract, Article 6(1)(b) GDPR is the legal basis. In all other cases, processing is based on Article 6(1)(f) GDPR; the legitimate interest is the proper handling of incoming correspondence. The data are deleted when the enquiry has been fully dealt with and there are no statutory retention obligations or other legitimate reasons for further storage.

The contact form uses local server-side anti-abuse controls to reduce automated spam. These controls include hidden form fields, a signed minimum submission-time check and temporary rate limiting. No third-party CAPTCHA or anti-spam service is loaded for this purpose.

For rate limiting, the requesting IP address is converted into a one-way keyed identifier; the theme does not store the raw IP address in its anti-spam counter. The temporary counter is retained for no longer than 24 hours. Processing is based on Article 6(1)(f) GDPR. The legitimate interest is protecting the contact channel and website infrastructure against automated abuse.

The publicly accessible content in this theme does not use analytics, marketing or advertising cookies. WordPress and the hosting or security infrastructure may process technically necessary information where required for session, security or administration functions. If a service requiring consent is added in the future, it will be used only after the necessary consent has been obtained and this Privacy Policy will be updated accordingly.

The current theme does not include first-party web analytics, remarketing or user-profiling services such as Google Analytics. The website operator does not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

The website may contain links to external websites or social networks. A normal link does not, in itself, transmit data to that third-party provider until you choose to open it. From that point onward, the privacy terms of the respective third party apply.

Personal data are disclosed to recipients only where this is necessary for the purposes described above or required by law. Recipients may include hosting, infrastructure and IT service providers. Where a service provider processes personal data on my behalf, it is engaged in accordance with Article 28 GDPR.

Processing outside the European Union or European Economic Area may occur particularly in connection with internationally operating infrastructure providers. Such transfers take place only where the requirements of Articles 44 et seq. GDPR are met, for example on the basis of an adequacy decision or appropriate safeguards.

Unless a more specific retention period is stated in this Privacy Policy, personal data are deleted once the purpose of processing no longer applies and there are no statutory retention obligations or overriding legitimate grounds for further storage. Statutory retention periods remain unaffected.

Subject to the statutory requirements, you have in particular the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), and the right to object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, send a message to [email protected].

Where personal data are processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. The relevant personal data will then no longer be processed unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.

Appropriate technical and organisational measures are used to protect personal data against loss, manipulation and unauthorised access. The website is delivered over encrypted HTTPS connections.

This Privacy Policy will be updated where the services used, the data processing or the applicable legal requirements change. The version published on this website at the relevant time applies.