Privacy Policy & Data Protection

1. Data Controller

The data controller responsible for the processing of personal data on this website (mohamedmasmoudi.net) is:

2. Server Log Files & Hosting

This website is hosted by OVH Groupe SAS (Roubaix, France) within the European Union. When visiting this website, the hosting server automatically records technical access logs (server log files) which may include your IP address, browser type, operating system, referrer URL, and time of server request.

Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest) to ensure system security, stability, and protection against malicious cyberattacks. Log files are retained strictly for operational security and rotated automatically.

3. Contact Form & Communications

When you submit an inquiry via the website contact form, the data you enter (such as your Name, Email address, Project Category, and Message) is processed to review your request, prepare technical estimates, and respond to your inquiry.

Legal Basis: Art. 6(1)(b) GDPR (Performance of pre-contractual measures) and Art. 6(1)(f) GDPR (Legitimate interest in responding to client communications).

Data Security & Anti-Spam: The form uses server-side WordPress nonce verification, cryptographic rate limiting, and honeypot traps. We do not sell, rent, or transfer your contact details to any third-party marketing companies.

4. Cookies & Consent Management

We implement a minimal-cookie approach. Technically necessary session cookies (e.g., for CSRF security protection and consent choice storage) do not require prior consent under the ePrivacy Directive. Optional or analytics cookies (if any) require affirmative consent via the CookieYes consent banner before being set. You can review or adjust your preferences at any time.

5. Your Rights as a Data Subject

Under Chapter III of the GDPR, you have the following guaranteed statutory rights:

• Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed.
• Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate personal data.
• Right to Erasure / Right to be Forgotten (Art. 17 GDPR): You can request deletion of your stored communications when no statutory retention duty applies.
• Right to Restriction of Processing (Art. 18 GDPR): You may demand restriction of processing in specific legal cases.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object at any time to data processing based on legitimate interests.
• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a competent European data protection supervisory authority (e.g., CNIL in France, BfDI in Germany, or your local EU authority).

6. SSL / TLS 256-Bit Encryption

For security reasons and to protect the transmission of confidential content (such as inquiries you send via the contact form), this site uses strict SSL/TLS encryption. You can recognize an encrypted connection by the https:// prefix and lock icon in your browser's address bar.