Privacy policy

1. Controller

The controller responsible for data processing on this website is:

No data protection officer has been appointed, as there is no legal obligation to do so.

2. In brief

• This website uses no cookies, no analytics or tracking services and no advertising.
• Fonts and images are served by this website itself; your browser does not connect to any third party for them.
• I only process personal data when you write to me via the contact form, by e-mail or via WhatsApp – and only to answer your enquiry.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Pages are delivered through Vercel’s global network; form submissions are processed in a data centre in Frankfurt am Main, Germany.

A data processing agreement (Data Processing Addendum) under Art. 28 GDPR is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR).

The legal basis is my legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

When you visit the website, Vercel automatically processes technical data sent by your browser:

• IP address
• date and time of access
• page or file requested
• referrer (previously visited page)
• browser type and version, operating system

This data is used to deliver the website, analyse errors and fend off attacks. It is not combined with other data and is deleted automatically after a short time.

4. Contact form

When you write to me via the contact form, I process the following information:

• name
• e-mail address
• phone number (optional)
• subject of your enquiry (e.g. buying property, investment, cooperation)
• your message
• the website language you used and the time of the enquiry

Purpose: handling and answering your enquiry.

Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a collaboration or pre-contractual steps; otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Protection against misuse: the form contains an invisible control field and checks how long it took to fill in, to detect automated spam. To prevent repeated mass submissions, your IP address is briefly processed in the server’s memory and discarded after 10 minutes at the latest; it is not stored.

Delivery by e-mail: your enquiry is delivered as an e-mail via the service Resend (Resend, Inc., USA); sending takes place via a data centre in Ireland (EU). A data processing agreement is in place with Resend; Resend is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

The e-mail is delivered to two mailboxes used to handle enquiries: info@aleksandar-simic.de (provider: STRATO GmbH, Berlin, Germany) and a mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Retention: I delete your enquiry once it has been dealt with and no further communication is expected, at the latest after 6 months. If we end up working together, the statutory retention periods apply.

5. Contact by e-mail and WhatsApp

If you e-mail me at info@alexsimic.com, I process your e-mail address and the content of your message in order to reply (Art. 6(1)(b) or (f) GDPR); retention as above.

E-mails to this address are forwarded by the forwarding service ImprovMX (ImprovMX Incorporated, 8 The Green STE D, Dover, Delaware 19901, USA) to the mailboxes named in section 4. A data processing agreement is in place with ImprovMX; transfers to the USA are based on standard contractual clauses (Art. 46(2)(c) GDPR).

The website contains a link to WhatsApp. WhatsApp only opens once you click it; no data is sent to WhatsApp before that. If you write to me via WhatsApp, the privacy policy of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, also applies. You can always write to me by e-mail instead.

6. Storage in your browser

The website sets no cookies. It only stores one entry (as:intro-seen) in your browser’s session storage, so that the opening animation is not replayed on every page during one visit. The entry contains no personal data, is never sent to me and is deleted automatically when you close the browser tab.

7. Fonts and images

The fonts used are stored on this server; no connection is made to Google or any other font provider.

Images are served by this website. Some landscape photographs come from the Unsplash platform; they are fetched and optimised by our hosting server, and your browser does not connect to Unsplash.

8. Your rights

You have the right at any time to

• access the data stored about you (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7(3) GDPR).

A short message to info@alexsimic.com is enough.

9. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

10. Security

The website is delivered exclusively over an encrypted connection (HTTPS/TLS).

11. No automated decisions

No automated decision-making, including profiling, takes place. Providing data is voluntary; without a name, e-mail address and message, however, I cannot answer an enquiry sent via the form.