Privacy policy

1. Who is responsible

I am responsible for this website and for the personal data processed through it (the "controller" under the EU General Data Protection Regulation, GDPR):

Youssef Farouk
Email: youssefamrfarouk@duck.com
Phone: +49 163 7108137
My location is given in the Legal notice (Impressum).

2. When you visit this site

This site is a set of ready-made pages. It is hosted and delivered by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States.

When you open a page, your browser sends a request to Vercel's servers. To deliver the page and to keep the service secure, Vercel processes server log data: your IP address, the date and time, the page requested, your browser's user agent and the page you came from.

• Purpose: delivering this site and protecting it against misuse and attacks.
• Legal basis: my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Processor: Vercel processes this data on my behalf under its Data Processing Addendum.
• How long: the logs I can see in my Vercel account are kept for 1 hour on my plan, as stated in Vercel's documentation on logs. Vercel keeps data only as long as it needs it for its legal and contractual obligations, and then deletes or anonymises it, as stated in Vercel's privacy policy.

3. Transfers to the United States

Vercel is based in the United States. These transfers are protected by the Standard Contractual Clauses in Vercel's Data Processing Addendum (Art. 46(2)(c) GDPR). Vercel also states that it is certified under the EU-U.S. Data Privacy Framework. While that certification is active, the European Commission's adequacy decision for the Framework applies (Art. 45 GDPR). You can check the current status on the official Data Privacy Framework list.

4. No cookies, no tracking, nothing from other companies

This site sets no cookies and stores nothing in your browser (no local storage or session storage). It runs no analytics or tracking and shows no ads. It loads no fonts, scripts, maps, videos or other content from other companies: the fonts and images come from this site itself. So there is nothing to agree to, and you will not see a cookie banner.

The "Copy email" and "Copy number" buttons on the Contact page put the address or number in your device's clipboard when you press them. Nothing is sent anywhere.

5. When you contact me

When you email or call me, I process what you send: your name, your email address or phone number, and your message.

• Email: my public address is a DuckDuckGo Email Protection address. DuckDuckGo (Duck Duck Go, Inc., based in the United States) receives emails sent to it and forwards them to my personal inbox at my email provider, where I read and answer them. See DuckDuckGo's privacy policy.
• Phone: calls and messages reach me through my mobile network operator.
• Purpose and legal basis: to answer you. This is based on my legitimate interest in answering messages (Art. 6(1)(f) GDPR) or, when your message is about a possible job or other contract with me, on taking steps before a contract (Art. 6(1)(b) GDPR).
• How long I keep messages: as long as I need them to answer you and follow up, and at most two years after our last contact, unless you ask me to delete them sooner or the law requires me to keep them longer.

6. Links to other websites

This site links to other websites, such as LinkedIn, the publishers of articles about me, my programme profile on edumig.org and, where shown, Google's preferred sources page. No data goes to them until you click a link. After that, their own privacy policies apply.

7. No profiling, no automated decisions

I do not use your data for profiling, automated decisions or advertising, and I never sell it. This site is not aimed at children.

8. Your rights

Under the GDPR you have the right to:

• see the data I hold about you (Art. 15)
• have it corrected (Art. 16)
• have it deleted (Art. 17)
• restrict how it is processed (Art. 18)
• receive it in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)

To use these rights, email me. You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work, or where you think the infringement happened.

9. Visitors in the United Arab Emirates and Egypt

I honour the same rights for visitors in the United Arab Emirates and in Egypt, in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and Egypt's Personal Data Protection Law (Law No. 151 of 2020). To use them, email me.

10. Data protection officer

I am not required to appoint a data protection officer.

11. Changes to this policy

I update this policy when the site changes. The version and date at the top show the current version.