Privacy policy
Controller
Alper Kagan Yildirim
Erika-Köth-Straße 6, 81671 München, Germany
Email kontakt@alper-yildirim.com
In brief
This website is deliberately lean:
- no cookies and no comparable storage techniques
- no tracking, no analytics tools, no advertising
- no external fonts, videos, maps or other embedded content
- a contact form without cookies and without a captcha
As no information is stored on or read from your device beyond what is technically required to display the website, Section 25 TDDDG does not apply. No consent is therefore needed and there is no cookie banner.
Hosting and server log files
The website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The domain is registered with Hover (Tucows) and DNS is managed by Cloudflare.
When you open a page, Cloudflare processes technically necessary connection data. This includes the IP address, date and time, the address requested, the referrer, browser and system details and the amount of data transferred. The purpose is to deliver the website and protect it against misuse and attacks. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is the secure, stable and fast provision of the website.
Cloudflare processes this data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to the USA. The European Commission has adopted an adequacy decision for the USA (EU-US Data Privacy Framework), and Cloudflare, Inc. is certified under this framework. Cloudflare also uses standard contractual clauses. The certification can be viewed on the Data Privacy Framework website.
According to Cloudflare, this log data is retained only for a limited period. I do not analyse it or combine it with other data.
Contact by email
If you email me, I process your email address, your name, the content of your message and the technical metadata of the email in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a possible engagement such as a talk, and otherwise Art. 6 (1) (f) GDPR. My legitimate interest is being able to answer enquiries.
I use Google Workspace for email. Depending on the contract, the provider for customers in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Google processes the data as a processor under an agreement pursuant to Art. 28 GDPR. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework (Data Privacy Framework entry).
I delete your message once the enquiry has been fully dealt with and no statutory retention obligations apply. If an enquiry leads to an engagement, I keep business correspondence for as long as commercial and tax law requires, usually six or ten years.
Contact form
If you use the contact form, I process your name, your email address, the optional details on organisation or occasion and your message in order to answer your enquiry. The legal bases are the same as for contact by email. The form sets no cookies, loads no scripts and uses no captcha. A field that is invisible to people protects against spam.
After you submit the form, a function on Cloudflare's servers receives and checks the details and passes them on without intermediate storage to the email delivery service Brevo. Brevo delivers the message to my Google Workspace mailbox. The provider is Brevo SAS, 17 rue Salneuve, 75017 Paris, France. Brevo acts as a processor under an agreement pursuant to Art. 28 GDPR. Brevo's data processing agreement lists its sub-processors.
The retention of the message in my mailbox follows the same rules as for contact by email.
Downloading the press photo
The press photo can be downloaded without registration. Only the connection data described above is processed by the host. The image files contain no metadata such as location data.
Links to other websites
The link to my LinkedIn profile is a plain link. You are only taken to LinkedIn when you click it. From then on, LinkedIn's privacy policy applies.
Your rights
Under the GDPR you have these rights:
- Access to the data processed under Art. 15 GDPR
- Rectification of inaccurate data under Art. 16 GDPR
- Erasure under Art. 17 GDPR
- Restriction of processing under Art. 18 GDPR
- Data portability under Art. 20 GDPR
- Objection under Art. 21 GDPR to processing based on Art. 6 (1) (f) GDPR
An informal email to kontakt@alper-yildirim.com is sufficient.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Obligation to provide data
You are not obliged to provide any data. Without the connection data, however, the website cannot be delivered, and without your email address I cannot reply. There is no automated decision-making or profiling.
Last updated
November 2026. This is a translation. The German version is authoritative.