Privacy Policy

The data controller responsible for data processing on this website is:

M. Alper Ozturk
Pappelallee 8
10437 Berlin, Germany
Email: info@ideava.com
Phone: (+49) 152 0242 4433

2.1 Contact Form Data

When you use our contact form, we collect:

• Your name
• Your email address
• Your company name (optional)
• Your message content

This data is processed by Formspree Inc. to deliver your message to us. Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

2.2 Server Log Files

Our hosting provider (GitHub Pages) automatically collects and stores information in server log files, including:

• Browser type and version
• Operating system
• Referrer URL
• IP address (anonymized)
• Date and time of access

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website security and optimization).

3.1 Cookie Consent

We use TermsFeed Cookie Consent to manage your cookie preferences. This tool sets the following strictly necessary cookies to store your consent choices:

• cookie_consent_user_accepted — records whether you have interacted with the cookie banner
• cookie_consent_level — stores your consent preferences per category
• cookie_consent_user_consent_token — a unique token to verify your consent

These cookies do not require your consent as they are strictly necessary for the website to function (Art. 6(1)(f) GDPR). You can change your preferences at any time by clicking "Cookie settings" at the bottom of any page.

3.2 Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors use our website.

Before you give consent: Google Analytics is loaded with Google Consent Mode v2 enabled. In this state, GA4 may send limited, cookieless measurement signals (so-called "pings") to Google. These pings do not contain personal data, do not set cookies, and do not allow Google to identify you. They are used solely for aggregate traffic estimation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate website usage).

After you give consent: Google Analytics sets cookies and collects:

• Pages visited and time spent
• Traffic sources
• Device and browser information
• Geographic location (country/city level)

Legal basis: Art. 6(1)(a) GDPR (your consent).

We have implemented the following safeguards:

• Google Consent Mode v2: Full tracking only activates after you consent
• IP Anonymization: Your IP address is anonymized before processing
• Data Processing Agreement (DPA): Google processes data solely on our behalf as a data processor
• Data sharing disabled: We have disabled all optional data sharing with Google for its own purposes

3.3 Google Tag Manager

We use Google Tag Manager (GTM) to manage website tags. GTM itself does not collect personal data or set cookies. It facilitates the deployment of other tools (like Google Analytics) based on your consent choices.

4.1 Formspree (Contact Form)

Our contact form is powered by Formspree Inc. When you submit the form, your data is transmitted to Formspree's servers in the United States. Data transfers are safeguarded under the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).

Legal basis: Art. 6(1)(b) GDPR (contract performance).

More information: Formspree Privacy Policy

4.2 GitHub Pages (Hosting)

Our website is hosted on GitHub Pages (GitHub Inc., USA). GitHub may collect technical data such as IP addresses in server logs as described in their privacy statement. Data transfers to the US are conducted under the EU-US Data Privacy Framework.

More information: GitHub Privacy Statement

Under the General Data Protection Regulation, you have the following rights:

• Right of Access (Art. 15): Request information about your personal data we process
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Request restricted processing of your data
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting prior processing

To exercise these rights, contact us at info@ideava.com.

• Contact form submissions: Retained for the duration of our business relationship plus 3 years
• Analytics data: Automatically deleted after 14 months (Google Analytics default)
• Consent cookies: Stored for 12 months, then your preference is requested again
• Server logs: Deleted after 7 days (GitHub Pages)

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for all data transmission
• Secure hosting infrastructure (GitHub Pages)
• Regular security reviews of third-party services

Some of our service providers (Google, Formspree, GitHub) are based in the United States. Data transfers to the US are conducted based on:

• EU-US Data Privacy Framework (where applicable)
• Standard Contractual Clauses (SCCs)

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

For Berlin, the competent authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin
www.datenschutz-berlin.de

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated revision date.

If you have questions about this privacy policy or our data practices, please contact:

M. Alper Ozturk
Email: info@ideava.com
Phone: (+49) 152 0242 4433