Privacy policy

1. Controller

Yasin Yenil [Straße Hausnummer] [PLZ] Krefeld Deutschland E-Mail: info@yeniltech.com

2. Hosting

This website is hosted by Vercel Inc. (USA). When you visit, technically necessary data (IP address, date/time, page requested, browser) is processed in server log files. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation). Transfers to the US rely on the EU-US Data Privacy Framework or standard contractual clauses.

3. Contact, quote and appointment forms

When you use a form, I process the data you provide (e.g. name, email, phone, message, project details, preferred date) to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (answering enquiries).

Data is stored in a database at Supabase Inc. (EU region) and confirmation emails are sent via Resend (USA). Data processing agreements are in place with both providers.

Data is deleted once it is no longer needed and no statutory retention periods apply.

4. Purchases via Lemon Squeezy

Digital products are sold through Lemon Squeezy, LLC (USA) as merchant of record. The payment script loads only when you click "Buy". Lemon Squeezy processes payment and invoice data under its own responsibility; I receive order data (name, email, product, amount) to fulfil the contract (Art. 6(1)(b) GDPR). Privacy policy: https://www.lemonsqueezy.com/privacy

5. Cookies and local storage

This website sets no tracking or marketing cookies. Strictly necessary: a cookie for your chosen language (NEXT_LOCALE), your colour scheme in local storage, and login cookies in the admin area only. Legal basis: § 25(2) TDDDG.

5a. Cookieless audience measurement

To improve the website I use Vercel Web Analytics and Speed Insights (Vercel Inc.) plus my own cookieless page-view statistics. No cookies are set and no IP addresses are stored: I record the page viewed, referring domain, country (derived from the IP, which is then discarded), device type, browser and operating system. Visitors are counted only through a daily-rotating, irreversible hash, so they cannot be recognised across days. Do Not Track and Global Privacy Control signals are respected. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement).

6. Fonts

Fonts are served locally from this server; there is no connection to Google Fonts.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Contact me at the email address above.

You may also lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection of North Rhine-Westphalia.