1. Data Controller

Shehabeldin Abdelgawad

Bebelstr. 78
79193 Stuttgart, Germany

2. Hosting & Server Logs

This website is hosted on Cloudflare. Visiting the site automatically logs certain information (IP address, request date/time, browser type) in server log files. This is based on our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).

3. Cookies & Your Consent

A consent banner appears on your first visit. Non-essential cookies and tracking technologies (Google Tag Manager, Meta Pixel, TikTok Pixel, OpenReplay) only load or activate after you accept via the banner's "Accept" button; choosing "Decline" keeps them disabled. Your choice is stored in a cookie (tracking_consent) and in your browser's local storage for 12 months. You can change your decision at any time by clearing this site's cookies in your browser — the banner will reappear.

4. Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited. It exists solely to manage other marketing/analytics tags and does not itself set cookies. It only loads further tags once you've accepted the consent banner.

5. Meta (Facebook/Instagram) — Pixel & Conversions API

With your consent, we use the Meta Pixel (Meta Platforms Ireland Limited) to measure the effectiveness of our advertising. In addition, when a contact-form inquiry succeeds, we separately transmit select data (your email address in irreversibly hashed form, IP address, browser identifier) server-side via the Meta Conversions API — this improves measurement accuracy even when ad blockers prevent the browser pixel from loading. Both channels are gated on your consent (Art. 6(1)(a) GDPR). Learn more: Meta's Privacy Policy.

6. TikTok — Pixel & Events API

With your consent, we use the TikTok Pixel (TikTok Technology Limited) along with the TikTok Events API for the same server-side, hashed/pseudonymized data described in Section 5. Learn more: TikTok's Privacy Policy.

7. OpenReplay — Session Recording

With your consent, we use OpenReplay to record sessions so we can find usability problems and technical errors. This captures your interactions with the site (page views, mouse movement, clicks, scrolling, window size, console and network errors) along with a pseudonymous visitor ID (the visitor_id cookie), stored as a replayable recording. Input fields are not captured by default, and email addresses and numbers in text are masked — so what you type into the contact form does not enter the recording. OpenReplay is open-source software that we run on a self-hosted instance of our own: recordings stay on our own infrastructure and are not transmitted to OpenReplay Inc. or any other third party. The legal basis is your consent (Art. 6(1)(a) GDPR).

8. Contact Form

When you use the contact form, we process the data you provide (name, email, requested service, message) to handle your inquiry (Art. 6(1)(b) GDPR — pre-contractual measures). Delivery is handled by our email service provider, Resend Inc. (USA), as a processor; appropriate safeguards apply to this international data transfer.

9. Your Rights

You have the right to access (Art. 15 GDPR), rectify (Art. 16), erase (Art. 17), restrict processing of (Art. 18), and port (Art. 20) your data, and to object to processing (Art. 21 GDPR). You may withdraw any consent at any time with effect for the future (see Section 3). You also have the right to lodge a complaint with a data protection supervisory authority.

10. Privacy Contact

For any privacy-related questions, reach us at sa.lightshoot@gmail.com.

Privacy Policy