Privacy Policy

1. Controller

David Mkhitaryan, Berlin, Germany. Contact: david@mkhitaryan.io. See the Impressum for full details.

2. Data collected

When you submit the contact form, I collect your name, email address, and message. This data is used solely to reply to your enquiry and is not shared with third parties, sold, or used for marketing. Data is stored on secure servers and deleted when it is no longer needed.

3. Hosting and infrastructure

This website is hosted via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare may process connection metadata (IP address, browser type, timestamp) as part of its CDN and DDoS-protection service. Cloudflare sets a technical cookie (__cf_bm) for bot detection; it expires after 30 minutes. For details, see Cloudflare’s Privacy Policy.

4. Analytics

This site uses Cloudflare Web Analytics to measure aggregate visitor traffic. The service is cookieless and does not use fingerprinting. No personal data, IP addresses, or device identifiers are stored. Data is aggregated at the point of collection and cannot be used to identify individual visitors. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in understanding site usage). For details, see Cloudflare’s Web Analytics privacy documentation.

5. Legal basis

Processing of contact form data is based on Art. 6(1)(b) GDPR (performance of a pre-contractual relationship) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise these rights, email david@mkhitaryan.io. You also have the right to lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).

7. Cookies

This site sets no tracking or analytics cookies. The only cookie present is the Cloudflare bot-detection cookie described above.

This is a draft — please have a lawyer review before publishing.