Privacy & Cookie Policy

How this site handles your personal data and cookies, in plain language.

Last updated:

The short version

  • I only collect what you choose to send me (through the contact form, the booking page or email) and what is technically needed to run this site.
  • Google Analytics runs only if you select Accept analytics cookies. If you reject them, the analytics script is not loaded at all.
  • No advertising, no profiling, and I never sell your data.
  • Contact form messages are not stored on the website. They are forwarded straight to my inbox.
  • Write to hasan@hasantayem.com at any time to see, correct or delete your data.

1. Who is responsible for your data

This website is run by Hasan Tayem, based in Padova, Italy. I am the data controller for the personal data described in this policy under the EU General Data Protection Regulation (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003).

Email: hasan@hasantayem.com

2. What I collect and why

Visiting the website

The site is hosted by Cloudflare, Inc. To deliver each page and protect the site against attacks and abuse, Cloudflare processes technical data such as your IP address, browser type, the page you requested and the time of the request. Short-lived technical logs of the site's server functions are kept for troubleshooting and are deleted automatically within a few days.

Legal basis: my legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

Contact form

When you send the contact form, I receive your name, email address, the subject you choose, your message and the language of the page. The form is checked by Cloudflare Turnstile and a hidden spam trap, and your message is then sent as an email to my inbox through Cloudflare Email Routing. It is not saved in any database on this website. I use it only to reply to you and to follow up on your enquiry.

Legal basis: steps taken at your request before a possible agreement (Art. 6(1)(b) GDPR) and my legitimate interest in answering the messages I receive (Art. 6(1)(f) GDPR).

Booking a call

The booking page shows my availability and creates the meeting in Cal.com, my scheduling service, using its EU data region (cal.eu). I receive your name, email address, organisation (optional), the meeting type, date, time and time zone, and any notes you add. Cal.com sends you the confirmation email and the calendar invitation.

Legal basis: steps taken at your request before a possible agreement (Art. 6(1)(b) GDPR).

Emailing me

Messages sent to an @hasantayem.com address are forwarded by Cloudflare Email Routing to my Google (Gmail) mailbox, and I reply from there.

Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR, as for the contact form.

Spam and bot protection

The contact and booking forms use Cloudflare Turnstile, which checks signals from your browser to tell people apart from automated bots. It does not show puzzles in most cases and is not used for advertising.

Legal basis: my legitimate interest in protecting the forms from abuse (Art. 6(1)(f) GDPR).

Website analytics (only with your consent)

If you select Accept analytics cookies, the site loads Google Analytics 4, provided by Google Ireland Limited, to count visits and understand which pages are useful. It records the pages you view, how long you stay, how you arrived (for example from a search engine), your device and browser type, your approximate location (country and city, derived from your IP address, which Google Analytics does not store), and interactions such as scrolling, clicks on links to other sites, file downloads and whether a contact or booking request was completed. It never records what you write in the forms.

Google signals and all advertising features are turned off. Analytics data is kept for 14 months and the analytics cookies expire after 13 months. If you do not accept, the Google Analytics script is not loaded at all.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). You can withdraw it at any time with Cookie settings at the bottom of every page. Withdrawing does not affect processing that took place before.

Fonts

All typefaces (Playfair Display, Source Serif 4 and Amiri) are hosted on this website's own server. Loading a page does not contact Google Fonts or any other font provider, so no data is shared with them.

Videos

YouTube videos are shown as a preview image. The YouTube player, in its privacy-enhanced mode (youtube-nocookie.com), loads only when you choose to play a video. From then on, Google's own privacy policy applies to that video.

Links to other websites

Links to social networks, Accessibility Pro, All Access World and other websites take you to services that have their own privacy policies.

I do not use your data for automated decision-making or profiling.

3. Cookies and local storage

Cookies and similar technologies, such as your browser's local storage, save small pieces of information on your device. This site uses only what it needs to work, plus analytics cookies if you accept them.

Cookies and storage used on hasantayem.com
Name Provider Purpose Duration Category
lang hasantayem.com (local storage) Remembers the language you chose Until you clear it Strictly necessary
theme hasantayem.com (local storage) Remembers light or dark mode Until you clear it Strictly necessary
cookieConsent hasantayem.com (local storage) Remembers your cookie choice 12 months Strictly necessary
__cf_bm, cf_clearance Cloudflare May be set to protect the site and forms from bots and attacks Usually 30 minutes Strictly necessary
_ga Google Analytics Distinguishes one visitor from another 13 months Analytics (only with consent)
_ga_ZNMX04T172 Google Analytics Keeps track of the current visit 13 months Analytics (only with consent)

Strictly necessary storage does not require consent. Analytics cookies are set only after you accept them, and your choice is remembered for 12 months, after which the site asks again. You can also delete cookies and local storage at any time in your browser settings.

4. Who else processes your data

I do not sell or rent your data and I do not share it with advertisers. It is processed on my behalf only by these service providers, under their data processing terms:

  • Cloudflare, Inc.: hosting, security, email forwarding and the Turnstile check.
  • Google Ireland Limited / Google LLC: my Gmail mailbox, Google Analytics (only with your consent) and the YouTube player (only when you play a video).
  • Cal.com, Inc.: scheduling and calendar invitations, using its EU data region.

I may also disclose data where the law requires it, for example to a court or a public authority.

5. Transfers outside the EU

Some of these providers are based in, or may access data from, the United States. These transfers are protected by the EU–US Data Privacy Framework for providers certified under it, such as Cloudflare and Google, or by the European Commission's Standard Contractual Clauses.

6. How long data is kept

  • Messages and emails: for as long as needed to handle your enquiry and any follow-up. Correspondence I no longer need is deleted. If we work together, the records that Italian tax and accounting law requires are kept for 10 years.
  • Bookings: in my Cal.com account for as long as needed to manage the meeting and its follow-up.
  • Analytics data: 14 months.
  • Technical logs: a few days.
  • Your cookie choice: 12 months.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data I hold about you and receive a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how your data is used;
  • object to processing based on my legitimate interest;
  • receive the data you gave me in a portable format;
  • withdraw your consent at any time, without affecting earlier processing.

To use any of these rights, email hasan@hasantayem.com and I will reply within one month. You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority in the country where you live or work.

8. Security

The whole site is served over HTTPS with strict security headers. There is no visitor database, the forms are protected against spam and abuse, and the accounts behind the site and the mailbox are protected with strong authentication, including two-step verification.

9. Children

This site is meant for adults and professionals and is not directed at children under 14. If you believe a child has sent me personal data, please contact me and I will delete it.

10. Changes to this policy

I may update this policy when the site or the services it uses change. The date at the top of this page shows the latest version.

11. Contact

Hasan Tayem, Padova, Italy
Email: hasan@hasantayem.com

See also the Terms of Use.