Legal

Datenschutzerklärung (Privacy Policy)

Last updated: 21 October 2026

This policy explains what personal data is processed when you visit www.khurramnawaz.com, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Khurram Nawaz
Dubai, United Arab Emirates
Email: info@khurramnawaz.com · Phone: +971 52 587 0670

Full contact details are in the Impressum.

2. Hosting and server log files

This website is hosted by Vercel Inc. (USA). When you open a page, the hosting provider automatically processes technical data that your browser sends: IP address, date and time of the request, requested page, referrer URL, browser and operating system. This is necessary to deliver the website securely and to detect and prevent abuse.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, reliable website).
  • Vercel processes data on my behalf under a data processing agreement. Transfers to the USA are based on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.

3. Contact form and email

If you use the contact form, the data you enter (name, email address, subject and message) is sent to me by email so I can reply. The form is delivered through the email service Resend (Resend, Inc., USA), and messages are stored in my mailbox hosted by Hostinger. If you email me directly, the same applies to the data in your email.

  • Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract, e.g. job or project enquiries) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
  • Retention: your message is kept until your enquiry is fully handled and then deleted, unless legal retention obligations apply.
  • Transfers to the USA (Resend) are based on the EU Standard Contractual Clauses.

4. Cookies and consent

This website stores your cookie choice in your browser's local storage (key kn-cookie-consent) so the banner does not appear on every visit. This is technically necessary and does not require consent (§ 25(2) TDDDG). No other cookies are set unless you accept analytics.

You can change or withdraw your consent at any time: .

5. Google Analytics (only with your consent)

If you click “Accept” in the cookie banner, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps me understand how visitors use the site (for example which pages are viewed and how visitors found the site) so I can improve it. If you decline, Google Analytics is not loaded at all.

  • Data processed: pseudonymous usage data such as pages visited, time on page, device and browser type, approximate location (country/city) and referring website. Google Analytics 4 does not log or store IP addresses.
  • Cookies: _ga and _ga_<ID>, stored for up to 2 years.
  • Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw consent at any time with effect for the future via “Cookie settings”.
  • Data may be transferred to Google LLC in the USA. Google is certified under the EU–US Data Privacy Framework.

6. Fonts

Fonts are hosted on this website's own server. No connection to Google Fonts or other font providers is made when you visit the site.

7. External links and YouTube videos

This website links to external sites such as LinkedIn and YouTube. Data is only transferred to those providers when you click a link; their own privacy policies then apply.

The course pages embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Videos are only loaded once you click “Play video” (two-click solution); before that, no connection to YouTube is made. I use YouTube's privacy-enhanced mode (youtube-nocookie.com). After the click your browser sends data such as your IP address to YouTube, and YouTube may set cookies or use local storage. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to Google LLC in the USA; Google is certified under the EU–US Data Privacy Framework.

8. Encryption

This website uses TLS (HTTPS) encryption to protect data in transit, including contact form submissions.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data stored about you (Art. 15),
  • have incorrect data corrected (Art. 16) or deleted (Art. 17),
  • restrict processing (Art. 18) and data portability (Art. 20),
  • object to processing based on legitimate interests (Art. 21),
  • withdraw consent at any time with effect for the future (Art. 7(3)),
  • lodge a complaint with a data protection supervisory authority (Art. 77).

To exercise your rights, email info@khurramnawaz.com.

10. Changes

This policy may be updated when the website or legal requirements change. The current version is always available on this page.