Farid Mahmudlu

Legal

Privacy policy

Last updated:

This policy explains how personal data is processed when you visit faridmahmudlu.dev (the “website”). It follows Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (the “Info Act”).

Summary

  • This website sets no cookies for analytics, advertising or personalisation and uses no local storage.
  • There are no ad networks, social-media pixels, fingerprinting or third-party embeds.
  • Fonts and scripts are self-hosted — your browser does not contact Google Fonts or any other CDN.
  • Visitor statistics are aggregate and cookieless.
  • If you email me, your message is used only to reply.

Who is responsible

The controller is Farid Mahmudlu, a private individual based in Budapest, Hungary. The contact email address is shown at the end of this page and in the contact section of the homepage. A data protection officer has not been appointed because none is required (Art. 37 GDPR).

1. Delivering and protecting the website

When you open a page, your browser necessarily transmits technical data to the hosting provider: IP address, date and time of the request, requested URL, referring page, user-agent string (browser and operating system), response status and amount of data transferred.

  • Purpose: to deliver the website, keep it stable and secure, and detect and mitigate abuse such as denial-of-service attacks or malicious bots.
  • Legal basis: Art. 6(1)(f) GDPR — my legitimate interest in operating a secure and reliable website.
  • Retention: this data is processed by Cloudflare on my behalf and retained only for the short periods defined in Cloudflare’s policies. I do not receive raw access logs and do not combine this data with other sources.

To protect the site, Cloudflare may set strictly necessary security cookies (for example __cf_bm or cf_clearance), only when needed to distinguish people from automated traffic or after a security check. These cookies do not track you across websites. They are exempt from consent under Art. 5(3) of the ePrivacy Directive, as implemented in Hungary by Section 155(4) of Act C of 2003 on Electronic Communications. Legal basis: Art. 6(1)(f) GDPR.

2. Visitor statistics

I use Cloudflare Web Analytics to understand which pages are read and how fast they load. It does not use cookies or local storage and does not fingerprint visitors by IP address, user agent or any other data. Collected data is aggregate: page path, referrer, browser, operating system and device type, country (derived from the IP address, which is not stored by the analytics product) and performance metrics such as Core Web Vitals.

  • Purpose: improving content and performance.
  • Legal basis: Art. 6(1)(f) GDPR — my legitimate interest in understanding, in aggregate, how the website is used.

3. Contacting me by email

If you email me, I process your email address, name, the content of your message and its metadata.

  • Purpose: answering your enquiry.
  • Legal basis: Art. 6(1)(b) GDPR where your message concerns steps prior to entering a contract (for example a job or project enquiry); otherwise Art. 6(1)(f) GDPR — my legitimate interest in replying to messages addressed to me.
  • Retention: as long as the conversation requires, and deleted no later than two years after our last exchange, unless a longer retention is required by law.
  • Delivery: messages sent to the address on this website are forwarded by Cloudflare Email Routing, which does not store them, to my mailbox hosted by Google (Gmail), where they are stored.

4. Downloading the CV

The CV is a static PDF file. Downloading it creates only the technical data described in section 1. The public version does not contain my phone number.

Recipients and processors

  • Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA — hosting, content delivery, security, web analytics and email forwarding, under a data processing agreement that incorporates the EU Standard Contractual Clauses.
  • Google — email hosting (Gmail), for messages you choose to send me.

Personal data is never sold, rented or shared for advertising.

Transfers outside the EEA

Cloudflare and Google operate global infrastructure, so data may be processed outside the European Economic Area, including in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework for certified companies (Art. 45 GDPR) and/or on Standard Contractual Clauses (Art. 46(2)(c) GDPR).

This website links to GitHub, LinkedIn and the websites of the products I have worked on. Nothing is loaded from those services while you browse here — there are no embedded widgets or social plugins. Once you follow a link, the privacy policy of that site applies. Because of the website’s referrer policy, the destination only learns that you came from faridmahmudlu.dev, not which page.

Cookies and local storage

Apart from the strictly necessary security cookies described in section 1, this website does not set cookies and does not use localStorage, sessionStorage or IndexedDB. For this reason there is no cookie banner.

Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15);
  • have inaccurate data rectified (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object at any time to processing based on legitimate interests (Art. 21).

To exercise these rights, email me. I will reply without undue delay and within one month at the latest (Art. 12(3) GDPR). Please note that I usually cannot identify individual visitors from technical or statistical data unless you provide additional information (Art. 11 GDPR).

Complaints and remedies

You may lodge a complaint with the Hungarian supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary Postal address: 1363 Budapest, Pf. 9. Phone: +36 1 391 1400 · Email: ugyfelszolgalat@naih.hu · Website: naih.hu

You may also contact the supervisory authority of your habitual residence or place of work in the EU, or bring proceedings before a court. In Hungary, such proceedings fall within the competence of the regional court (törvényszék); you may choose the court of your place of residence.

Automated decisions and children

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place. This website is not directed at children under 16.

Security

The website is static and served exclusively over HTTPS. It uses a strict Content Security Policy, HSTS, and no third-party scripts other than the Cloudflare analytics beacon. Collected data is kept to the minimum needed. Details are in the security policy.

Changes

This policy is updated when the website’s data practices change. The date at the top shows the latest revision.

Contact Farid Mahmudlu · Budapest, HU Email: hello [at] faridmahmudlu [dot] dev

Back to the homepage