Privacy notice

Who is responsible

The data controller is Mostafa Yasin, operating Albatross Coding as an independent individual in Sweden. For privacy questions or to exercise your rights, email albatrosscoding@gmail.com. There is no separate data protection officer.

Information we collect

If you send the website contact form, we process:

• Your name
• Your email address
• Your business or organisation, if you choose to provide it
• The service you say you need help with
• Your message
• Limited technical information needed to run and protect the form, including the language of the page and information used only to limit repeated attempts

If you email albatrosscoding@gmail.com instead of using the form, we receive the content of that message, your email address and any other details you include. We do not ask for payment details or special-category data through this website.

Why we use this information

• To respond to your enquiry
• To prepare a quote and take other steps you have asked for before a possible contract
• To protect the form from spam, abuse and excessive requests

Legal bases

When you ask us to discuss a project, prepare a quote or take other steps you have requested before a possible contract, we process the enquiry under Article 6(1)(b) of the GDPR (steps at your request before entering a contract).

For general questions, answering messages, keeping communication secure and preventing spam, abuse and excessive automated requests, we rely on Article 6(1)(f) of the GDPR (legitimate interests). Those interests are to respond to people who contact the studio and to keep the website and mailbox usable and reasonably secure.

We do not use consent as the main legal basis for handling contact enquiries. Confirming that you have read this notice is an acknowledgement, not consent for marketing.

Service providers

We use other organisations to host the website, send email and protect the form. They process personal data only as needed to provide those services.

• Cloudflare hosts the website and provides content delivery and security.
• Resend delivers messages sent through the website contact form.
• Upstash stores the short-lived information used to limit repeated form attempts.
• Google (Gmail) provides the mailbox albatrosscoding@gmail.com, where enquiries are delivered.

Some of these providers may process information outside the European Economic Area. This notice does not claim a specific international-transfer mechanism. See each provider’s privacy information for how they handle personal data.

How long we keep information

Mostafa keeps enquiry emails for up to 12 months after the last relevant communication. He deletes them manually after that period, unless a contract, a legal obligation or a legal claim requires longer retention. There is no automated deletion system. The website does not store enquiries in a separate database.

The contact form allows five submission attempts within ten minutes. A further attempt is refused only while that ten-minute limit is still active. After it ends, the form can be used again.

Your rights

Subject to the GDPR, you can ask us to:

• Access your personal data
• Correct inaccurate data
• Erase data
• Restrict processing
• Object to processing based on legitimate interests
• Receive data you provided in a portable format, where that right applies

You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY). You do not have to complain to us first, although you are welcome to contact us so we can try to help.

Sale of data and marketing

Personal data is not sold and is not used for unrelated marketing or advertising.

Automated decisions and profiling

We do not use profiling, and we do not make automated decisions that produce legal or similarly significant effects. The contact form may refuse further submissions after five attempts in ten minutes. That is a security limit, not profiling.

Required and optional form fields

Name, email address, the requested service and your message are required so we can understand and answer the enquiry. Business or organisation is optional. The website also records the language you used when submitting. A hidden field is used only to detect automated spam and should be left empty.

Cookies, analytics and tracking

This website’s application code does not include analytics products, advertising, embedded maps or video players, and it does not set cookies.

The site is hosted on Cloudflare. Cloudflare receives the technical information needed to deliver pages, such as IP addresses. See Cloudflare’s privacy information for how that platform handles requests. This website’s application code does not add Cloudflare analytics.

Changes to this notice

If this notice changes in a material way, the updated text will be published on this page with a new effective date.

How to contact us about privacy

Email albatrosscoding@gmail.com. Please say that your message is about privacy or a data-subject request so it can be handled with care.