Privacy

The controller for this site and for the data described here, in the sense of the GDPR, is Hanzala Afzal. You can reach me by email at the address below.

The site is hosted by Cloudflare, Inc. in the United States. When you open a page, Cloudflare processes technical data about that request, namely your IP address, the time, the page you asked for, the page you came from and details about your browser. Cloudflare needs this to deliver the site and to protect it against attacks, and from it I see aggregated statistics such as the number of visits and the countries they come from. I do not use any of this to identify anyone.

The legal basis is my legitimate interest in running a secure and reliable website (Art. 6(1)(f) GDPR). Cloudflare processes the data on my behalf under the data processing addendum that is part of its customer terms. Cloudflare is certified under the Data Privacy Framework agreed between the EU and the United States, which covers the transfer to the US, and it keeps these logs only as long as those purposes require, as set out in its privacy policy.

If you email me, your address and your message pass through Porkbun LLC in the United States, which forwards mail for this domain to my personal mailbox with my email provider. Porkbun states that it uses appropriate safeguards for transfers to the US, such as standard contractual clauses, as described in its privacy policy.

I use your address and message only to reply to you, and delete them once they are no longer needed for that, unless the law requires me to keep them. The legal basis is my legitimate interest in answering you (Art. 6(1)(f) GDPR), or, if you write to me about a job or a contract, steps you asked for before entering into it (Art. 6(1)(b) GDPR).

This site links to other sites, such as GitHub, LinkedIn and my former employers. Nothing from them loads until you click a link, and from then on their own privacy policies apply.

You have the right to access the personal data I hold about you and to have it corrected, deleted or restricted (Art. 15 to 18 GDPR), to receive it in a portable format (Art. 20 GDPR), and to object to processing based on legitimate interest (Art. 21 GDPR). To use any of these rights, just email me.

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77 GDPR).