kouider

HTML5 · CSS3 · JavaScript · React · Angular · PHP · Laravel · Node.js · Docker · Python · WordPress    

// datenschutz

Privacy Policy

This is the personal website of Ahmad Kouider — a private individual. It is a non-commercial showcase of personal work and projects, not an agency, company or other business entity.

This privacy policy (Datenschutzerklärung) explains how personal data is processed when you visit and use this website, in accordance with the EU General Data Protection Regulation (GDPR / DSGVO), the German Federal Data Protection Act (BDSG) and the German Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG).

1. Controller (Responsible party)

The controller within the meaning of Art. 4 No. 7 GDPR for the data processing described below is the natural person:

Ahmad Kouider
Dortmund, Germany
E-Mail: ahmad@kouider.de

As a private individual I am not required to appoint a data protection officer. For all questions relating to data protection, please contact me directly via the contact details above or the contact form on this website.

2. General information on data processing

I process personal data (e.g. name, e-mail address, IP address, usage data) only to the extent necessary for the operation and provision of this website or to the extent you voluntarily provide it to me. Legal bases result in particular from Art. 6 GDPR. Where cookies or similar storage technologies are used, § 25 TDDDG also applies. The processing of personal data on this website is limited to what is technically necessary; I do not use your data for advertising, marketing or profiling purposes and I do not sell personal data.

3. Hosting and server log files

This website is hosted by:

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Germany

The servers are located in data centres in Germany. Hetzner processes data on my behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR (Auftragsverarbeitungsvertrag).

When you visit this website, the web server automatically records information in so-called server log files: IP address, date and time of the request, page or resource accessed, browser type and version, operating system, referrer URL and HTTP status code. This processing is based on Art. 6 para. 1 lit. f GDPR and serves the technical delivery, security and stability of the website as well as the defence against attacks. The log data is deleted automatically on a regular basis (usually within a few days).

4. SSL / TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the “https://” in your browser’s address bar. Data that you transmit to me cannot be read by third parties in this way.

5. Cookies and similar technologies

This website does not set any cookies, and it does not store anything in your browser’s local or session storage. This was verified in a real browser: after a full page load document.cookie was empty, localStorage was empty, and sessionStorage held only a single flag that WordPress uses for its emoji feature.

Because no information is stored on your device and none is read from it, the consent requirement of § 25 para. 1 TDDDG is not triggered. That is why you will not see a cookie banner on this site — none is needed.

The external services named in sections 7 and 8 are the only requests a page makes to another domain, and none of them sets a cookie.

6. Contact forms

The main contact form on this website is provided by Lumo Forms, a plugin that runs entirely on this server. The data marked as required fields (name, e-mail address, message) as well as — for technical reasons — your IP address and the time of submission are processed in order to answer your enquiry.

The processing is based on Art. 6 para. 1 lit. b GDPR insofar as your enquiry is related to the initiation or performance of a contract; otherwise it is based on my legitimate interest in answering your enquiry (Art. 6 para. 1 lit. f GDPR).

Submissions are stored in the database of this website on servers in Germany and forwarded to me by e-mail. They are deleted after 365 days, or earlier once your enquiry has been dealt with and no statutory retention obligations apply.

One article on this site additionally contains a form provided by Jetpack Forms (Automattic Inc., USA). Data entered there is transmitted to and stored on WordPress.com infrastructure operated by Automattic. A data processing agreement exists with Automattic, and Automattic is certified under the EU-US Data Privacy Framework, on which basis transfers to the USA take place. The legal basis is the same as above.

7. Spam protection

Two measures protect the contact form from automated abuse.

A hidden honeypot field is part of the form itself. It is invisible to visitors and is checked on this server; no data leaves the server for this purpose.

The form additionally uses Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) to tell human visitors apart from automated ones. Turnstile loads a script and a challenge frame from challenges.cloudflare.com and processes technical data such as your IP address and browser information for that purpose. It is designed to work without cookies and without tracking you across other websites. The legal basis is my legitimate interest in protecting the form from automated abuse (Art. 6 para. 1 lit. f GDPR). A data processing agreement exists with Cloudflare.

8. Statistics and analytics

8.1 Umami (self-hosted, cookieless)

This website uses Umami, an open-source web analytics tool, to understand how the site is used. The Umami instance runs on infrastructure I operate myself, at umami-pkskwg0wkcw0go4sg0wgs8k4.ah-t.de, and the data stays there. It is not shared with any third party and is not transferred outside the European Union.

Umami does not use cookies and does not write to local or session storage, so no identifier is placed on your device. Your IP address is processed on the server only to derive a coarse session signal and the country; the IP address itself is not stored.

Because nothing is stored on or read from your device, no consent is required (§ 25 TDDDG). The processing is based on my legitimate interest in understanding how the website is used so that I can improve it (Art. 6 para. 1 lit. f GDPR). You may object to this processing at any time (Art. 21 GDPR).

8.2 Jetpack Stats (WordPress.com)

This website additionally uses Jetpack Stats of Automattic Inc. for a statistical overview of page views. For this purpose a tracking pixel is loaded from stats.wp.com and information about visited pages, the referrer and the browser type is processed; complete IP addresses are not stored. The processing is based on my legitimate interest in the needs-based design and improvement of the website (Art. 6 para. 1 lit. f GDPR). You may object to this processing at any time (Art. 21 GDPR). Automattic is certified under the EU-US Data Privacy Framework, on which basis transfers to the USA take place.

Other Jetpack services used on this site (security modules such as brute-force protection, firewall and uptime monitoring) process technical data such as IP addresses exclusively for the protection of this website and run on the basis of the data processing agreement with Automattic.

Google Analytics is not used on this website. No analytics data is transmitted to Google, and no Google Analytics cookies are set.

9. External resources

Only two external services are loaded when you view a page. When they are retrieved, your IP address is transmitted to the respective provider:

  • Cloudflare Turnstile (Cloudflare, Inc., USA) — challenges.cloudflare.com, used on the contact form to distinguish human visitors from automated ones; see section 7;
  • Jetpack Stats (Automattic Inc., USA) — stats.wp.com, a tracking pixel; see section 8.2.

Everything else is served from this server. jQuery, Tailwind CSS and the hero background image are hosted here, no icon font is loaded from a content delivery network, and no styling or analytics resource is fetched from a CDN.

Links to external websites (e.g. social networks) are mere references: merely viewing this page does not transmit any data to the linked providers. Only when you follow a link do the privacy policies of the respective provider apply.

10. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by me (Art. 77 GDPR). The supervisory authority responsible for me is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
E-Mail: poststelle@ldi.nrw.de

11. Further information

No automated decision-making including profiling takes place. The provision of personal data in the contact form is neither legally nor contractually required; however, without the required fields I cannot process your enquiry.

Last updated: September 2026. Changes to this privacy policy will be published on this page.