Legal

Privacy Policy

1 · Controller

The controller for data processing on this website is:

Ardal Toprak
Karthäuserwall 28e
50678 Köln
Deutschland
Email: kontakt@ardal-toprak.com
Phone: +49 176 211 29 145

2 · Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On our behalf, the provider processes data that is technically necessary to deliver the website — in particular server log files (see section 3). The basis is our legitimate interest in secure and efficient provision (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the provider.

Vercel's servers are located in the USA, among other places. This involves a transfer of personal data to a third country. Vercel Inc. is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission (Art. 45 GDPR) serves as the basis for the transfer. In addition, Vercel has implemented standard contractual clauses (Art. 46 (2) (c) GDPR). Further information can be found in Vercel's privacy policy at vercel.com/legal/privacy-policy.

3 · Server log files

When you access the website, the hosting provider automatically collects information that your browser transmits. This includes: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request and IP address. This data is not merged with other data sources and serves technical provision and security. The legal basis is Art. 6 (1) (f) GDPR. It is stored for the period customary for error analysis and security and then deleted.

4 · Contact via form, call-back assistant, email and phone

When you contact us via the inquiry form, the call-back assistant, by email or by phone, we process the data you provide in order to handle your inquiry. This may include: name, company, role, email address, phone number, industry, location and the content of your message (type of inquiry, topic, time frame, budget range, free text).

The legal basis is Art. 6 (1) (b) GDPR, insofar as your inquiry is aimed at concluding or performing a contract, otherwise our legitimate interest in responding to inquiries (Art. 6 (1) (f) GDPR) and your consent, insofar as you have given it in the form (Art. 6 (1) (a) GDPR).

Delivery: To deliver the form inquiries to our mailbox (kontakt@ardal-toprak.com), we use the service provider Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The data you provide in the form is processed for the purpose of sending the email. A data processing agreement (Art. 28 GDPR) is in place with Resend. As processing may also take place in the USA, the transfer is based on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR). The legal basis for processing is Art. 6 (1) (b) and (f) GDPR. Further information: resend.com/legal/privacy-policy.

Retention period: We store your inquiry until it has been conclusively handled, and beyond that only insofar as statutory retention obligations exist or the data is required for initiating an engagement. After that it is deleted.

5 · Local storage (cookie notice)

This website sets no tracking or marketing cookies. Only to store your acknowledgment of the cookie notice is a technically necessary entry placed in your browser's local storage (localStorage). It contains no personal data and serves only to avoid showing the notice on every visit. The legal basis is Art. 6 (1) (f) GDPR; setting it is exempt from consent under § 25 (2) TDDDG, as it is technically necessary.

6 · Fonts

This website uses fonts that are embedded locally on the server. When the page is accessed, no connection to third-party servers (such as Google Fonts) is established and no IP address is transmitted to external providers.

7 · Your rights

Within the statutory provisions, you have the right at any time to:

• access to your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw a given consent with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, an informal message to kontakt@ardal-toprak.com is sufficient.

8 · Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority includes the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Postfach 20 04 44, 40102 Düsseldorf (www.ldi.nrw.de).

9 · Currency of this policy

This privacy policy is updated as soon as data processing changes — for example through new features. The version published on this page applies in each case.

10 · Note on text creation (AI)

The content of this website was created with the support of AI-assisted tools and then editorially reviewed and approved. No automated decision-making within the meaning of Art. 22 GDPR takes place in relation to you. Your personal data is not processed by AI systems.

As of August 2026