Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Email: contact@kamycoding.com

2. General Information on Data Processing

The protection of your personal data is important to me.

Personal data means any information relating to an identified or identifiable natural person. This may include, for example, an IP address, a name, an email address or the content of a message.

Personal data is processed through this website only insofar as necessary to provide and secure the website, process contact requests or operate the services expressly described below.

Processing is carried out in accordance with applicable data protection law, in particular Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

3. Website Hosting – Netlify

The frontend of this website is hosted using Netlify.

Provider:

When you access this website, technically necessary connection and usage data may be processed.

This may include, in particular:

• IP address
• date and time of access
• requested resource
• browser type and version
• operating system or device information
• referrer information
• technical log and security information

This processing is carried out in order to provide this website securely, reliably and efficiently.

The legal basis is Article 6(1)(f) GDPR.

The legitimate interest is the secure and technically reliable provision of this website.

Netlify is based in the United States. Processing or transfer of personal data to the United States therefore cannot be completely excluded.

Netlify states that it uses recognised transfer mechanisms for relevant international data transfers, including the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

4. Serverless Contact Processing – Netlify Functions

Requests submitted through the contact form are sent to the /api/contact endpoint and processed by a Netlify serverless function (Netlify Functions).

The function validates contact-form submissions and forwards valid messages to Brevo for email delivery.

To process a request, the function receives the data submitted through the contact form:

• name
• email address
• message
• technical information required to process the request

This processing serves to receive, validate and forward contact requests.

Further information on website hosting by Netlify is provided above. The processing and storage involved in email delivery are described in the following sections.

5. Contact Form

A contact form is available on this website.

When you use the contact form, the information entered by you is processed.

This may include:

• name
• email address
• message
• acknowledgement of the privacy information
• technical information necessary to transmit the request

The data is used exclusively to receive, process and respond to your inquiry.

If your inquiry relates to entering into or performing a contractual relationship, processing is based on Article 6(1)(b) GDPR.

For other inquiries, processing is based on Article 6(1)(f) GDPR. The legitimate interest is the proper handling and response to incoming inquiries.

6. Server-Side Validation and Abuse Protection

Information submitted through the contact form is validated both in the frontend and on the server.

Server-side validation is used to reject invalid or unexpected input.

Technical safeguards are also used to protect the contact form from automated abuse, including rate limiting and a honeypot field.

The legal basis for this processing is Article 6(1)(f) GDPR.

The legitimate interest is protecting the website, email infrastructure and technical systems against spam and misuse.

7. Email Delivery via Brevo

Brevo is used to technically deliver messages submitted through the contact form.

Brevo processes the information required to deliver the email.

This may include:

• name
• email address
• message content
• sender and recipient information
• technical delivery information

Brevo is used as a technical service provider for email delivery.

Depending on the nature of your inquiry, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

Brevo provides information regarding its processing of personal data and makes a Data Processing Agreement available to its customers.

8. Email Storage – Zoho Mail

Incoming messages are managed through my email account hosted with Zoho Mail.

For European hosted services, the relevant Zoho entity includes:

Zoho operates data centre infrastructure in the European Union.

The following information may be stored in connection with email communications:

• name
• email address
• communication content
• date and time
• technical email metadata

The processing is required to handle and document communications.

Depending on the nature of the inquiry, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

9. Retention Period

Personal data is generally stored only for as long as necessary for the respective purpose.

Contact requests and related email communications are deleted once the inquiry has been completed and there are no legal, contractual or other legitimate grounds requiring further storage.

Where statutory retention obligations apply, the relevant information will be retained for the duration required by law.

Technical log data may be retained by the hosting and infrastructure providers for the periods necessary for security, diagnostics and operation of their services.

10. Language and Theme Preference

This website supports English and German.

To remember the language selected by you, a technically necessary cookie named "NEXT_LOCALE" is set in your browser. It is set when you switch the language or open a language version that differs from your browser's language setting.

The cookie contains only the selected language ("en" or "de"). It is transmitted only over encrypted connections and expires at the end of your browser session.

When you change the colour theme, your choice ("light" or "dark") is stored in your browser's Local Storage under the key "theme".

This entry remains until you delete it in your browser.

The stored values are used solely to preserve your language and theme preference on later page views.

They are not used for advertising, analytics or tracking purposes.

The legal basis is § 25(2) No. 2 TDDDG, as this storage is strictly necessary to provide the language and theme function you requested, and Art. 6(1)(f) GDPR (our legitimate interest in a user-friendly website).

11. Cookies, Analytics and Tracking

This website currently does not use its own analytics or marketing tracking services.

In particular, KamyCoding does not set tracking cookies for personalised advertising or the creation of user profiles.

Technically necessary processing performed by the hosting and infrastructure providers remains unaffected.

12. Encrypted Transmission

This website is provided over HTTPS.

This encrypts communication between your browser and the website while the information is being transmitted.

Modern browsers generally indicate an encrypted connection through the use of "https://" in the address bar.

13. Recipients of Personal Data

Personal data is disclosed to service providers only to the extent necessary to operate the website and process requests.

These providers currently include:

• Netlify for website hosting and serverless contact processing
• Brevo for technical email delivery
• Zoho for storage and management of email communications

Personal data is not disclosed to these providers for advertising purposes.

14. Your Rights under the GDPR

Subject to the applicable statutory requirements, you have in particular the following rights:

• right of access under Article 15 GDPR
• right to rectification under Article 16 GDPR
• right to erasure under Article 17 GDPR
• right to restriction of processing under Article 18 GDPR
• right to data portability under Article 20 GDPR
• right to object under Article 21 GDPR

Where processing is based on consent, you may generally withdraw that consent at any time with effect for the future.

15. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right, subject to the statutory requirements, to object to such processing on grounds relating to your particular situation.

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority concerning the processing of your personal data.

You may in particular contact the supervisory authority responsible for your place of residence, habitual residence, place of work or the place of the alleged infringement.

17. Automated Decision-Making

This website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

18. Changes to this Privacy Policy

This Privacy Policy may be updated if technical, legal or organisational circumstances change.

The version currently published on this website applies.