Privacy Policy

1. Who I Am

This website is operated by Mohamed Nejjar, an AI engineer based in Munich, Germany (https://mohamednejjar.com).

Contact: hello@mohamednejjar.com

2. What Data Is Collected

This is a personal portfolio site. Data collection is minimal and limited to:

• Contact form submissions — name, email address, and message content you voluntarily provide via the contact form.
• Analytics data — aggregated, anonymized usage data (pages visited, time on page, referrer, browser/device type) collected via analytics tools, if enabled. No personally identifiable information is stored.
• Server logs — standard server access logs (IP address, request path, timestamp) retained by the hosting provider (Vercel) for operational and security purposes.

3. How Your Data Is Used

Data collected is used solely to:

• Respond to your contact form enquiries.
• Understand how the site is used in order to improve it.
• Ensure the security and availability of this website.

Your data is never sold, rented, or shared with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA), processing is based on:

• Consent (Art. 6(1)(a) GDPR) — for analytics cookies, where applicable.
• Legitimate interests (Art. 6(1)(f) GDPR) — for server logs and site security.
• Contract performance (Art. 6(1)(b) GDPR) — when you contact me to discuss a potential engagement.

5. Cookies

This site may use first-party session cookies strictly necessary for functionality. If analytics are enabled, analytics cookies may be set. No third-party advertising or tracking cookies are used.

You can disable cookies in your browser settings at any time without affecting core site functionality.

6. Third-Party Services

This site is hosted on Vercel (Vercel Inc., USA). Vercel processes server requests and may retain access logs. See Vercel's Privacy Policy.

Fonts are loaded via Google Fonts API. Google may receive your IP address when fonts are fetched. This site uses next/font to self-host fonts where possible, avoiding third-party requests.

7. Data Retention

Contact form enquiries are retained only as long as necessary to respond and follow up on your message. Analytics data is retained in aggregate, anonymised form with no fixed expiry. Server logs are subject to Vercel's standard retention policy.

8. Your Rights

Under GDPR and applicable data protection law, you have the right to:

• Access a copy of personal data held about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Lodge a complaint with a supervisory authority (in Germany: BfDI).

To exercise any of these rights, contact hello@mohamednejjar.com.

9. Security

This site is served exclusively over HTTPS. Reasonable technical measures are in place to protect any data processed through this site.

10. Changes to This Policy

This privacy policy may be updated occasionally. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after any changes constitutes acceptance of the updated policy.