Privacy Policy

Privacy Policy

Last updated: 10 September 2025

This Privacy Policy explains how we collect, use, and protect personal data when you visit navid-zardi.com (the “Website”).

1. Controller & Contact

Controller: Navid Zardi / Site Owner
Email: info@navid-zardi.com

If you have any questions about this Policy or your personal data, please contact us at the email above.

2. What We Process and Why (Lawful Bases)

We process personal data under the GDPR (Art. 6(1)(a)–(f)) as follows:

  • Server logs (legitimate interests – Art. 6(1)(f))
    When you access the Website, our hosting provider processes technical data (IP address, date/time, requested URL, referrer, user agent). We use this for security, performance, and troubleshooting.

  • Contact forms & email (contract / steps at your request – Art. 6(1)(b); legitimate interests – Art. 6(1)(f))
    If you contact us via form or email, we process the data you provide (e.g., name, email, message, attachments) to respond and manage your request.

  • Embedded media & social links (consent / legitimate interests – Art. 6(1)(a)/(f))
    We embed YouTube videos (using privacy-enhanced mode where possible). When you play a video, Google may set cookies and process device/usage data. We link to Instagram; when you visit Instagram, Meta’s policies apply.

We do not sell personal data and do not use automated decision-making producing legal or similarly significant effects.

3. Cookies

  • Essential cookies are required to operate the Website (e.g., security, load balancing, basic preferences).

  • Third-party cookies may be set by YouTube when you interact with embedded videos.
    You can control cookies in your browser and—if a consent banner is present—via its settings. Note: YouTube’s privacy-enhanced mode reduces but does not eliminate data transfers to Google.

4. Hosting (Processor)

Our Website is hosted by STRATO AG (Germany), which processes server logs and stores the Website on our behalf under a data processing arrangement (Art. 28 GDPR). Processing generally occurs in the EU/EEA.

5. Third-Party Providers

  • YouTube (Google Ireland Limited / Google LLC).
    When you play embedded videos, Google may process usage data and set cookies.
    Privacy: https://policies.google.com/privacy
    International transfers (e.g., to the U.S.) may rely on Standard Contractual Clauses (SCCs).

  • Instagram (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.).
    Our Website contains links to Instagram profiles. When you follow these links, Instagram’s own terms apply.
    Privacy: https://privacycenter.instagram.com/
    International transfers may rely on SCCs.

If we add analytics, newsletters, payment processors, or other tools in the future, we will update this section.

6. Retention

  • Server logs: typically retained 7–30 days for security and troubleshooting, then deleted or anonymized.

  • Contact emails/forms: retained as long as necessary to handle your request and for a reasonable period thereafter (typically up to 12 months), unless longer retention is required by law or needed to establish, exercise, or defend legal claims.

  • Cookies: persist according to their lifetime or until you clear them.

7. International Transfers

Where providers transfer data outside the EEA (e.g., to the U.S.), we rely on approved safeguards such as Standard Contractual Clauses (SCCs) and additional measures where appropriate.

8. Your Rights (EU/EEA)

You have the right to request access, rectification, erasure, restriction, objection, and data portability under the GDPR. Where processing is based on consent, you may withdraw consent at any time (this does not affect processing prior to withdrawal).
You also have the right to lodge a complaint with a supervisory authority in the EU/EEA (e.g., your local data protection authority in Germany).

To exercise your rights, contact us at info@navid-zardi.com.

9. Security

We implement appropriate technical and organizational measures to protect your data (e.g., TLS encryption, access controls). No method of transmission or storage is completely secure.

10. Children

This Website is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided data to us, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to our Website or legal requirements. The “Last updated” date will change accordingly.