Privacy Policy

1. Introduction

Ibrahim Marube ("I", "me", or "my") operates this portfolio website. This Privacy Policy explains how I collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and German data protection laws.

2. Data Controller

3. Data I Collect

When you use this website, I may collect the following data:

• Contact Form Data: name, email address, reason for contact, preferred date/time for appointments, and message content
• Technical Data: IP address, browser type and version, device information, operating system, pages visited, time spent on pages
• Cookies: essential session cookies for functionality (e.g., language preference). No tracking or advertising cookies are used

4. Legal Basis for Processing

I process your personal data based on the following legal grounds under GDPR:

• Consent (Art. 6(1)(a) GDPR): when you voluntarily submit the contact form or provide your email address
• Legitimate Interest (Art. 6(1)(f) GDPR): to improve website functionality, respond to inquiries, and maintain security
• Contract Performance (Art. 6(1)(b) GDPR): when negotiating or executing service agreements and freelance contracts

5. How I Use Your Data

Your personal data is used for the following purposes:

• To respond to your inquiries and appointment requests
• To provide the services you request (web development, mobile apps, consulting, etc.)
• To improve website functionality and user experience
• To maintain security and prevent fraud
• To comply with legal obligations

6. Data Sharing and Third Parties

I do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared only in the following circumstances:

• Service Providers: secure hosting providers (e.g., Vercel) and email service providers to process contact forms
• Legal Requirements: when required by law, court order, or governmental authority
• Your Consent: with your explicit permission for specific purposes

7. Data Retention

I retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Contact form submissions: up to 2 years or until project completion
• Technical logs: 30 days for security and troubleshooting
• Client contracts: as required by German tax and commercial law (typically 10 years)

After these periods, your data will be securely deleted or anonymized.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access (Art. 15): request a copy of all personal data I hold about you
• Right to Rectification (Art. 16): correct any inaccurate or incomplete data
• Right to Erasure (Art. 17): request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): limit how I use your data under certain conditions
• Right to Data Portability (Art. 20): receive your data in a structured, machine-readable format
• Right to Object (Art. 21): oppose processing based on legitimate interest
• Right to Withdraw Consent (Art. 7(3)): withdraw your consent at any time without affecting prior processing

To exercise any of these rights, please contact me at ibrahimnmarube@gmail.com. I will respond within 30 days as required by GDPR.

9. Security Measures

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction:

• HTTPS encryption for all data transmission
• Secure hosting with industry-standard security protocols
• Regular security updates and patches
• Access controls and authentication

However, no internet transmission is 100% secure. While I strive to protect your data, I cannot guarantee absolute security.

10. Third-Party Services

This website may use the following third-party services:

• Hosting Provider: Vercel (with EU/Germany data centers when possible)
• Email Services: Resend for processing contact form submissions

These providers are GDPR-compliant and process data in accordance with applicable data protection laws.

11. International Data Transfers

I strive to store and process your data within the EU/EEA. If data must be transferred outside the EU/EEA, I ensure adequate safeguards are in place such as Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission, or your explicit consent.

12. Cookies

This website uses only essential cookies necessary for functionality:

• Language preference: to remember your language choice across visits

I do not use tracking cookies, advertising cookies, or analytics cookies. You can disable cookies in your browser settings, though this may affect website functionality.

13. Children's Privacy

This website is not intended for individuals under 16 years of age. I do not knowingly collect personal data from children. If I become aware that I have collected data from a child under 16 without parental consent, I will take steps to delete that information promptly.

14. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or for legal, operational, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date at the top.

15. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe your rights have been violated. In Germany: German Federal Commissioner for Data Protection and Freedom of Information (BfDI), Graurheindorfer Str. 153, 53117 Bonn, Germany — www.bfdi.bund.de

16. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, contact me at ibrahimnmarube@gmail.com.