Privacy Policy

1. Who I Am

This website is operated by Mohamed Nejjar, an AI engineer based in Munich, Germany (https://mohamednejjar.com).

Data Controller: Mohamed Nejjar, Munich, Germany.

Contact: mohamed8nejjar@gmail.com

2. What Data Is Collected

This is a personal portfolio site. Data collection is minimal and limited to:

• Contact form submissions — name, email address, and message content you voluntarily provide via the contact form.
• Analytics data — aggregated, anonymized usage data (pages visited, referrer, browser/device type) collected only if you opt in via the consent banner. No advertising cookies are used.
• Server logs — standard server access logs (IP address, request path, timestamp) retained by the hosting provider (Vercel) for operational and security purposes.
• Contact security controls — anti-spam protections on the contact endpoint may process technical metadata (such as IP-derived rate-limit checks and form timing) to prevent abuse.

3. How Your Data Is Used

Data collected is used solely to:

• Respond to your contact form enquiries.
• Understand how the site is used in order to improve it.
• Ensure the security and availability of this website.

Your data is never sold, rented, or shared with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA), processing is based on:

• Consent (Art. 6(1)(a) GDPR) — for analytics cookies, where applicable.
• Legitimate interests (Art. 6(1)(f) GDPR) — for server logs and site security.
• Contract performance (Art. 6(1)(b) GDPR) — when you contact me to discuss a potential engagement.

5. Cookies

This site uses only technically necessary storage by default. Analytics are loaded only after consent. No third-party advertising or tracking cookies are used.

You can disable cookies in your browser settings at any time without affecting core site functionality.

6. Third-Party Services

This site is hosted on Vercel (Vercel Inc., USA). Vercel processes server requests and may retain access logs. See Vercel's Privacy Policy.

Contact form email delivery is handled by Resend(Resend, Inc., USA) as a data processor. See Resend's Privacy Policy.

This site may use Vercel Web Analytics only after explicit consent through the banner controls.

Fonts are served using next/font and are self-hosted by Next.js at build/runtime to avoid unnecessary third-party font requests.

7. Data Retention

Contact form enquiries are retained only as long as necessary to respond and follow up on your message. Analytics data (if enabled by consent) is retained according to provider defaults. Server logs are subject to Vercel's standard retention policy.

Detailed retention schedule: /data-retention

8. Your Rights

Under GDPR and applicable data protection law, you have the right to:

• Access a copy of personal data held about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Lodge a complaint with a supervisory authority (in Germany: BfDI).

To exercise any of these rights, contact mohamed8nejjar@gmail.com.

Request workflow and response timelines: /data-rights-request

9. Security

This site is served exclusively over HTTPS. Reasonable technical measures are in place to protect any data processed through this site.

10. Changes to This Policy

This privacy policy may be updated occasionally. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after any changes constitutes acceptance of the updated policy.

11. Legal Notice

Legal notice information is available at /imprint.