Legal

Privacy Policy

This site is operated in Germany and this policy is written to comply with the GDPR. The German version is the legally binding one; this is a courtesy translation.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Ehsan Nowroosi
Stephanstraße 17
22047 Hamburg, Germany
Email: contact@nowroosi.com

2. General Information on Data Processing

I process personal data of visitors to this website only to the extent necessary to provide a functioning website and my content and services. Processing generally only takes place with the user's consent (Art. 6 (1)(a) GDPR) or, where legally permitted, on the basis of legitimate interests (Art. 6 (1)(f) GDPR).

3. Hosting and Server Log Files

This website is hosted with Contabo (Contabo GmbH, Munich). Every time this site is accessed, the server automatically collects information in so-called server log files, which your browser automatically transmits. This includes: IP address, date and time of the request, browser type and version, operating system used, and the page requested. This data cannot be attributed to a specific person and is processed solely to ensure smooth operation and to improve security (legitimate interest, Art. 6 (1)(f) GDPR).

4. Web Analytics (Cloudflare Web Analytics)

I use Cloudflare Web Analytics to understand how this website is used (e.g. page views, approximate origin of visits, browser type used). Cloudflare Web Analytics is deliberately designed to minimize data collection: it sets no cookies and uses no browser fingerprinting to recognize individual visitors. Only aggregated, anonymized metrics are collected — individual visitors are not tracked across multiple visits or websites. The provider is Cloudflare, Inc. (San Francisco, USA). The legal basis is my legitimate interest in analyzing and improving my offering (Art. 6 (1)(f) GDPR). More information: cloudflare.com/web-analytics. Beyond this, no other analytics or tracking tools are used and no individual user profiles are created.

5. Fonts

This website uses Google Fonts. The font files are bundled locally at build time and served exclusively from my own server when a page is requested. No connection to Google's servers is made and no data is transmitted to Google.

6. Contact by Email

If you contact me by email, your details (email address, and optionally your name and message content) will be stored for the purpose of processing your inquiry. Processing is based on my legitimate interest in responding to inquiries (Art. 6 (1)(f) GDPR) or in the context of initiating a contract (Art. 6 (1)(b) GDPR).

7. AI Chat Feature ("Ask about this site")

This website offers a chat that lets you ask questions about my projects and blog posts. When you submit a message, that text is sent to the following third-party providers for processing:

  • Anthropic, PBC (San Francisco, USA) — to generate the chat response using the Claude language model.
  • OpenAI, L.L.C. (San Francisco, USA) — for semantic search across this website's own content (embeddings), so the response can be generated from this site's relevant content.

Processing is based on your consent through active use of the chat (Art. 6 (1)(a) GDPR). Since both providers are based in the USA, data may be transferred to a third country; both providers have committed to Standard Contractual Clauses under Art. 46 GDPR. Please do not use the chat for personal or sensitive information. Chat history is not permanently stored on my server.

8. Your Rights

You have the right at any time to:

  • Request information about the data stored about you (Art. 15 GDPR)
  • Request correction of inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Request restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

Simply contact me by email at contact@nowroosi.com. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Data Retention

Personal data is only stored for as long as necessary for the respective purpose, or until you object to the processing or request its deletion, provided no statutory retention obligations apply.

10. Changes to this Privacy Policy

I reserve the right to adjust this privacy policy so that it always complies with current legal requirements or to reflect changes to my services. The version in effect at the time of your visit applies.