Skip to content
Alami.

Privacy policy (Datenschutzerklärung)

The legally binding version of this page is the German one.

Last updated: September 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Abdessamad Ouali-Alami
Kardinal-von-Galen-Str.
48607 Ochtrup
Deutschland

Email: abdessamad@ouali-alami.tech

2. Summary

  • This website sets no cookies and uses no tracking, no analytics tools and no advertising.
  • Fonts are served from my own server. No third-party content is embedded (no Google Fonts, no embedded videos, maps or social media plugins).
  • Personal data is only processed when you visit the website (technically necessary server log data at the hosting provider) and when you send me a message.

3. Hosting and server log data

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes data that your browser transmits:

  • IP address
  • date and time of access
  • page or file requested
  • referrer URL (the previously visited page), if transmitted
  • browser type and version, operating system
  • HTTP status code and amount of data transferred

This data is technically required to deliver the website and to ensure its stability and security, for example to detect and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and functional provision of the website. Vercel stores the log data only for a limited period and then deletes it. I do not combine this data with other data sources.

Server-side functions of this website (such as the contact form) run in a data centre in Frankfurt am Main, Germany. Static content is delivered through Vercel's global network, so your request is usually answered by a data centre near you.

A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. As Vercel is a company based in the USA, a transfer of personal data to the USA cannot be ruled out. Such transfers are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where Vercel is certified under it, the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR). More information: vercel.com/legal/privacy-policy.

4. Contact form

When you write to me through the contact form, I process your name, your email address and your message in order to handle and answer your enquiry. Providing this information is voluntary, but without it I cannot reply to you.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures (for example a job or project offer). In all other cases, the legal basis is Art. 6(1)(f) GDPR; my legitimate interest is answering enquiries addressed to me.

Protection against misuse: To prevent mass spam, your IP address is briefly processed in the server's memory when you submit the form, in order to limit the number of messages per sender (at most five messages in ten minutes). The IP address is not stored permanently and is discarded after ten minutes at the latest. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is protecting the website and my inbox against misuse.

Delivery by email: The message is delivered to me as an email via the email service Resend (Resend, Inc., USA) and then stored in my email inbox. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend. Any transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where Resend is certified under it, the EU-US Data Privacy Framework (Art. 45 GDPR). More information: resend.com/legal/privacy-policy.

Retention period: I delete your message as soon as it is no longer needed for its purpose, usually no later than six months after our communication has ended, unless statutory retention obligations apply or the enquiry results in an ongoing contractual relationship.

5. Contact by email

If you email me directly, I process your email address and the information in your message in order to reply to you. The legal bases and retention period are the same as for the contact form (section 4).

6. Storage in your browser (colour scheme)

If you use the switch in the header to change between the light and dark colour scheme, your choice is saved in your browser's local storage (localStorage, key theme) so that it is kept for your next visit. This information stays on your device, is not transmitted to me or to third parties, and is not used for recognition or tracking.

The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as the storage is strictly necessary to provide a function you have expressly requested. You can delete the entry at any time in your browser settings.

The language of the website is chosen based on your browser's language setting, which your browser sends with every request anyway. Nothing is stored for this.

7. Links to other websites

This website contains plain links, for example to GitHub and LinkedIn. No data is transmitted to these providers when you visit my website. Only when you click a link do you leave my website; the respective provider is then responsible for processing your data on the target site.

8. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar. Data you send to me, for example through the contact form, cannot be read by third parties.

9. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR): Where I process your data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, an informal message to abdessamad@ouali-alami.tech is enough.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Data Protection and Freedom of Information Commissioner of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

10. No automated decision-making

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

11. Changes to this privacy policy

I update this privacy policy when the website or the legal requirements change. The version published here applies.