Privacy Policy

Last updated: June 2026

Mazen Alsenih ("I", "me", or "my") operates the website mazensenih.com (the "Service"). This page informs you of my policies regarding the collection, use, and disclosure of personal data when you use this Service, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the German Federal Data Protection Act (BDSG).

1. Data Controller

Mazen Alsenih Germany

Contact: Please use the contact form on this website. I will respond within 24 hours.

2. Data I Collect and Why

2.1 Contact Form

When you submit the contact form, I collect your name, email address, company name (optional), and message content.

• Purpose: To read and respond to your inquiry.
• Legal basis: Art. 6(1)(f) GDPR - legitimate interest in communicating with people who reach out.
• Retention: Messages are retained for up to 12 months after the inquiry is resolved, then deleted.
• Processor: Email delivery is handled by Resend Inc. (USA). Resend acts as a data processor under a GDPR-compliant Data Processing Agreement. See resend.com/legal/dpa.

2.2 Website Analytics (Vercel Analytics)

This website uses Vercel Analytics to collect anonymous, aggregate statistics about page visits. No cookies are placed and no personal identifiers are stored or linked to individuals.

Data collected includes: page URL, referrer URL, device type (desktop/mobile), browser family, and country-level location derived from IP address. The IP address itself is not stored.

• Purpose: Understanding how visitors use the website in order to improve it.
• Legal basis: Art. 6(1)(f) GDPR - legitimate interest in improving the website's content and usability.
• Opt-out: You may decline analytics via the cookie consent banner on this site. Your choice is respected going forward.
• Processor: Vercel Inc. (USA), operating under the EU–US Data Privacy Framework and a GDPR-compliant DPA. See vercel.com/legal/privacy-policy.

2.3 Bot Protection (Cloudflare Turnstile)

The contact form is protected by Cloudflare Turnstile, an anti-bot security service. To verify that a visitor is human, Turnstile may process your IP address, browser characteristics (user-agent, screen properties), and interaction patterns. This data is used solely for the security check and is not used for advertising or profiling.

• Purpose: Protecting the contact form from automated spam and abuse.
• Legal basis: Art. 6(1)(f) GDPR - legitimate interest in protecting the website and its users from malicious automated traffic.
• Cookie: __cf_bm - a strictly necessary, session-scoped security cookie set by Cloudflare. No consent is required for this cookie under the TDDDG (German Telecommunications Digital Services Data Protection Act) as it is essential for the security of the service.
• Processor: Cloudflare Inc. (USA), operating under EU Standard Contractual Clauses (EU SCCs, Module 2) and the EU–US Data Privacy Framework. See cloudflare.com/privacypolicy.

2.4 Website Hosting (Vercel)

This website is hosted on Vercel. When you visit any page, Vercel's infrastructure processes your IP address and HTTP request data (URL, browser type, timestamp) to deliver the page. This is standard server-side processing necessary to operate any website.

• Legal basis: Art. 6(1)(f) GDPR - legitimate interest in operating a publicly accessible website.
• Processor: Vercel Inc. (USA) - see above.

3. Cookies

Vercel Analytics does not set any cookies.

No advertising, tracking, or third-party marketing cookies are used on this website.

4. Data Transfers Outside the EU/EEA

The following service providers are based in the United States. All transfers are covered by appropriate GDPR safeguards:

5. Your Rights Under the GDPR

You have the following rights regarding your personal data under the GDPR (Arts. 15–21):

• Right of access (Art. 15): You may request a copy of the personal data I hold about you.
• Right to rectification (Art. 16): You may request correction of inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Art. 17): You may request deletion of your personal data, where no legal obligation requires retention.
• Right to restriction of processing (Art. 18): You may request that I temporarily restrict how I process your data.
• Right to data portability (Art. 20): You may request your data in a structured, machine-readable format.
• Right to object (Art. 21): You may object at any time to processing based on legitimate interests (Art. 6(1)(f)). I will stop processing unless I can demonstrate compelling legitimate grounds.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time via the cookie banner at the bottom of this page. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact me via the contact form. I will respond within one month (Art. 12(3) GDPR).

6. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority at any time (Art. 77 GDPR). In Germany, the competent authority is the Landesdatenschutzbehörde of the federal state in which you reside.

A complete list of all German state data protection authorities: bfdi.bund.de - Addresses of state authorities

The Federal Commissioner for Data Protection and Freedom of Information (BfDI) can be reached at: bfdi.bund.de | Graurheindorfer Str. 153, 53117 Bonn

7. Data Security

I implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All data transmissions to and from this website are encrypted via HTTPS/TLS. Third-party processors are contractually bound to equivalent standards.

8. Changes to This Policy

I may update this Privacy Policy to reflect changes in the law or the services used. The date at the top of this page indicates the most recent revision. Significant changes will be announced via a notice on the website.