The controller responsible for data processing on this website is:

Ahmad Al Rifai
Rifai Web, Einzelunternehmen
Volksgartenstr. 16A
40764 Langenfeld
Deutschland
Email: info@rifaiweb.de
Phone: +49 152 9263 5260

No data protection officer is appointed, as this is not legally required. For privacy requests, please use the contact details above.

This website presents my services and lets you get in touch. There are no user accounts, no newsletter, and no advertising tracking. Personal data is processed only as needed to operate the site, keep it secure, and respond to your inquiries.

This website is provided via the infrastructure of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (Cloudflare). Cloudflare provides hosting, content delivery, and basic security. Technical usage data may be processed (in particular IP address, date and time of access, requested page, browser type, and referrer). The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in a secure, fast operation of the website). Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework and/or Standard Contractual Clauses of the European Commission.

cloudflare.com/privacypolicy

When you visit the website, server log data transmitted by your browser is collected automatically. This typically includes IP address, date and time, requested URL, amount of data transferred, HTTP status, browser type, and operating system. Processing is necessary for technical delivery, abuse detection, and system security (Art. 6 (1)(f) GDPR). The data is not combined with other data sources and is deleted after a short period unless longer retention is required to investigate security incidents.

If you use the contact form, I process the data you provide (name, email address, optional business and phone number, package interest, and message) in order to answer your inquiry and, if requested, to take steps prior to entering into a contract. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual steps at your request) and Art. 6 (1)(f) GDPR for the proper handling of communication.

The contact form is received on my own server (Cloudflare). To deliver the message to my email address I use, depending on configuration, Resend (Plus Five Five, Inc., USA) via their API or SMTP, or an SMTP connection such as Google Gmail SMTP. Form data is processed only to forward your inquiry and is not stored in a separate customer database. Where data is transferred to the USA (Resend and/or Google), this is based on the EU-US Data Privacy Framework and/or Standard Contractual Clauses of the European Commission or, where necessary, Art. 49 (1)(b) GDPR, because the transfer is required to handle your request prior to a contract.

You can avoid this transfer by writing to me directly by email: info@rifaiweb.de

resend.com/legal/privacy-policy policies.google.com/privacy

If you contact me by email or phone, I process the data you send in order to handle your request (Art. 6 (1)(b) GDPR, or alternatively Art. 6 (1)(f) GDPR). I keep the data as long as the conversation and any statutory retention duties require.

A WhatsApp button on this website is only a link to the service of WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Data is sent to WhatsApp / Meta only after you click the link. Any processing by WhatsApp after that is governed by WhatsApp’s privacy policy. Use is voluntary; you can reach me by email or phone instead.

whatsapp.com/legal/privacy-policy

I use Cookie Confirm (Hashtag SEM Marketing Management FZCO, UAE) to collect and document your cookie consent. Before you explicitly confirm the banner (accept, reject, or save selection), this website does not store information in your browser: no cookies, no localStorage, and no sessionStorage. Consent is not assumed from scrolling or clicking outside the banner. Only after your choice does Cookie Confirm set technically necessary cookies to store that decision, and it may process a consent ID, user agent, country, and consent status. Cookie Confirm acts as a processor. Tracking, analytics, or marketing cookies are set only if you expressly consent (Art. 6 (1)(a) GDPR). Storing your consent is required to meet legal obligations (Art. 6 (1)(c) GDPR). You can change your choice at any time via Cookie settings.

cookieconfirm.com/privacy

Cookie settings

The fonts used on this website are served locally from this site’s host and are not loaded directly from Google servers in visitors’ browsers. Visiting the site therefore does not, by itself, transfer data to Google for fonts.

I delete personal data as soon as the purpose of processing no longer applies, unless statutory retention duties require otherwise. Inquiries that do not lead to a contract are generally kept for up to 12 months so that follow-up questions can be matched. If a contract is concluded, tax and commercial retention periods (usually 6 to 10 years) may apply. Server logs are deleted after a short time.

Recipients may include: myself as controller, Cloudflare (hosting/CDN/security), Cookie Confirm / Hashtag SEM Marketing Management FZCO (consent banner and consent log), Resend / Plus Five Five, Inc. (email delivery), Google (only if Gmail SMTP is used), and, only if you actively use them, email, telecom, and WhatsApp providers. Transfers to third countries (in particular the USA and the UAE) take place only to the extent described above and on the basis of appropriate safeguards (EU-US Data Privacy Framework, Standard Contractual Clauses) or the statutory exception in Art. 49 (1)(b) GDPR for your inquiry.

You have the following rights vis-à-vis me as controller, provided the statutory requirements are met:

• Access to stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, an informal message to the contact details in the legal notice is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority. This is usually the authority of your habitual residence, your place of work, or the place of the alleged infringement. For North Rhine-Westphalia:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf

https://www.ldi.nrw.de/

I will update this privacy policy if the website, the services used, or the legal situation change. The version published on this page is the one that applies.