Privacy Policy
Datenschutzerklärung · Last updated October 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is İsmet Mert Subay. The postal address and contact details are listed in the Impressum.
2. Hosting
This website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. When you visit the site, Framer automatically processes technical data in server log files, such as your IP address, date and time of the request, the page requested, the referring URL, and your browser and operating system. This is necessary to deliver the website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and functioning website). A data processing agreement with Framer is in place. Framer may also collect anonymised, cookie-free usage statistics.
3. Cookies and consent
Analytics cookies are only used if you agree in the cookie banner (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Your choice is stored in your browser’s local storage (key “ismert-cookie-consent”) so the banner is not shown again; this storage is technically necessary (§ 25 (2) TDDDG). The site also stores a short-lived flag in session storage so the logo animation only plays once per visit. You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page; withdrawal does not affect the lawfulness of processing before it.
4. Google Analytics
If you consent, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies to analyse how visitors use the site, for example which pages are viewed, how long, and from which device and region. IP addresses are shortened before storage. The information may be transferred to Google LLC in the USA; Google LLC is certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. The legal basis is your consent (Art. 6 (1) (a) GDPR). Without consent, Google Analytics is not loaded at all. Data is retained according to the retention settings in Google Analytics and then deleted. More information: policies.google.com/privacy
5. External content and libraries
Some pages load resources from third-party servers, which receive your IP address when doing so: the interactive page “My Drawer” loads code libraries (Three.js, cannon-es) from the content delivery networks esm.sh and jsDelivr; images and files are delivered via Framer’s servers. This is done to display the website correctly and efficiently. The legal basis is Art. 6 (1) (f) GDPR.
6. Contact
If you contact me by email or phone, I process the data you provide (such as your name, email address and message) to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). The data is deleted once it is no longer needed, unless statutory retention periods apply.
7. Your rights
You have the right to access the personal data I hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)). To exercise these rights, email ismertsubay@gmail.com.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.