Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Ukusimama UG (haftungsbeschränkt)
Griemshorster Straße 30D
21698 Harsefeld, Germany
Email: moin@kharashfeh.com

2. General information on data processing

Protecting your personal data matters to us. This website can generally be used without providing personal data. We only set cookies for analytics purposes with your consent (see section 7). We do not set cookies for marketing purposes. Fonts are loaded locally from our server; no connection is made to third parties such as Google Fonts. If you use the dark mode switch, your browser stores this setting locally (local storage) so it is kept for your next visit. It also stores your choice in the cookie banner so we do not ask again on every visit. Neither is transmitted to us and can be deleted at any time in your browser settings. The legal basis is Section 25 (2) no. 2 TDDDG.

3. Server log files

When you visit this website, the hosting provider automatically collects information in so-called server log files that your browser transmits automatically: browser type and version, operating system used, referrer URL, time of the server request and IP address. We do not combine this data with other data sources and do not use it to identify you. The recipient is our hosting provider, which processes the data on our behalf. Processing is based on Art. 6 (1) (f) GDPR, based on our legitimate interest in the technically error-free presentation and security of the website.

4. Contacting us by email

If you contact us by email, your details (email address, name and the content of your message) are stored by us for the purpose of handling your enquiry and for follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding to your enquiry). We do not pass this data on without your consent. We delete it once your enquiry has been fully dealt with, unless statutory retention obligations apply, for example for business letters under Section 257 of the German Commercial Code (HGB).

5. Links to external platforms

This website contains links to external platforms (for example LinkedIn). When you click them you leave our website; the privacy policy of the respective provider then applies. Simply embedding the links does not transfer any data to those providers.

6. Appointment booking via Calendly

To arrange a first call we use the service Calendly, provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. The calendar is not loaded automatically: it only appears once you explicitly click the button in the contact section (a so-called two-click solution). Before that click no connection to Calendly is established and no data is transferred. If you click, your IP address and technical details about your browser and device are transferred to Calendly and cookies required to operate the calendar are set. If you book an appointment, Calendly additionally processes the data you enter (name, email address, preferred time and optional details). The legal basis for loading the calendar is your consent under Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG, which you give by clicking and can withdraw at any time with effect for the future by reloading the page and not opening the calendar again. The legal basis for processing the appointment data is Art. 6 (1) (b) GDPR. The transfer to the USA is based on the European Commission's standard contractual clauses and on Calendly's certification under the EU-US Data Privacy Framework. Details can be found in Calendly's privacy notice at calendly.com/legal/privacy-notice. You are of course welcome to arrange an appointment informally by email instead, without using Calendly.

7. Web analytics with Google Analytics

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Google Analytics is only loaded once you click “Accept” in the cookie banner. Before that no connection to Google is established. After you accept, Google Analytics sets cookies (_ga and _ga_CWGF1ZMVEK, stored for up to 2 years) and collects information about how you use the website: pages viewed, time spent, scroll depth, which sections of a page are displayed and which FAQ questions are expanded, clicks on buttons and links (such as to the free check, the booking calendar or the email address), a booked appointment request, where the visit came from (referrer), approximate location, device type, browser and operating system. In the process your IP address is transmitted to Google. Google Analytics 4 does not store IP addresses; they are only used to determine the approximate location. We use the reports solely to understand how the website is used and to improve it. We do not use the data for advertising and do not combine it with other data. Usage data is deleted automatically after 14 months. We have switched off sharing data with Google for its own purposes (business recommendations). The legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You can withdraw it at any time with effect for the future by opening the cookie settings at the bottom of any page and choosing “Decline”. We have concluded a data processing agreement with Google under Art. 28 GDPR. A transfer of data to Google LLC in the USA cannot be ruled out. It is based on Google's certification under the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses. Details can be found in Google's privacy policy at policies.google.com/privacy.

8. Your rights

Within the scope of the statutory provisions you have the right at any time to obtain information about your stored personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany. There is no automated decision-making, including profiling, under Art. 22 GDPR. You are not obliged to provide us with personal data; without it, however, we cannot, for example, answer your enquiry.

9. Right to object under Art. 21 GDPR

Where we process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), for example for server log files or when answering emails, you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal email to us is sufficient.

10. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar and the padlock symbol.

11. Validity of this privacy policy

This privacy policy is currently valid (as of October 2026). As the website develops further, it may become necessary to update this privacy policy.