Skip to content

Privacy policy

This English version is provided for convenience; the German version is legally binding.

1. Controller

AMdesigned
Almir Muhic
Kirschenbergstraße 9
65207 Wiesbaden
Germany
E-mail: am@amdesigned.de

2. The essentials

This website uses no tracking or analytics tools and loads no fonts, scripts or other content from third-party servers. It only sets a cookie when you click “View projects” on a personal access page for a case study (see 7.). Personal data is only processed where it is technically necessary to run the website, when you write to me yourself, or when you request access to a case study.

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The servers are located in Germany. IONOS processes the data listed below solely on my behalf; a data processing agreement pursuant to Art. 28 GDPR is in place. The legal basis is my legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

4. Server log files

Each time this website is accessed, the server automatically stores information transmitted by your browser:

  • IP address
  • date and time of access
  • requested page or file
  • referrer URL (the previously visited page)
  • browser and operating system used
  • HTTP status code and amount of data transferred

This data is necessary to deliver the website and to detect and prevent attacks or errors (Art. 6(1)(f) GDPR). It is not combined with other data and is deleted after 14 days at the latest.

5. Contact by e-mail or contact form

If you write to me by e-mail or through the contact form, I process your e-mail address, your name and your message in order to answer your enquiry. Messages from the form are stored in the CMS of this website (hosted by IONOS) and I receive a notification by e-mail. The form uses the same protection against automated requests as access requests (ALTCHA, see 6.). The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or collaboration, otherwise my legitimate interest in answering it (Art. 6(1)(f) GDPR).

I delete your enquiry once it has been fully dealt with, at the latest after twelve months, unless statutory retention obligations apply (for example if it leads to a contract).

6. Access requests

If you request access to a case study through the form, I store in the CMS your name, your company, your e-mail address, your message, the language of the form, the case study requested, the processing status of the request, whether your e-mail address was automatically recognised as a private mail provider, the time of the request and of the decision, and, if I approve the request, the projects granted, their validity period and the access link created from it.

I use this data to decide on the request and to send you the access link or a reply. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or collaboration, otherwise my legitimate interest in protecting confidential client work and deciding on access (Art. 6(1)(f) GDPR).

The notification about a new request and the delivery of the access link or a reply run by e-mail through IONOS SE as processor; a data processing agreement pursuant to Art. 28 GDPR is in place with IONOS.

To protect against automated requests, the form uses ALTCHA, a proof-of-work check that runs on this server itself, sets no cookie and sends no data to any third party. Your IP address is processed only in hashed form and only in memory, to allow at most three requests per hour; it is not stored (except for the server log files, see 4.).

I delete your request at the latest after six months, earlier on request; the notification e-mail about it in my mailbox is deleted within the same six months.

7. Access links for case studies

Some case studies contain material from client projects that is not public. I send selected people a personal access link for these, for example following an access request (see 6.) or directly from me. By clicking “View projects” on the access page you acknowledge the confidentiality note; only then does the website set a cookie („am_access“) that only contains the link’s number and its expiry date and is kept for at most 30 days. It is technically necessary so that the shared content stays visible to you and is therefore set without consent (§ 25(2) no. 2 TDDDG).

For each link I store in the CMS the company it was created for, optionally a name or label (set by me or taken from the access request), the acknowledgment of the confidentiality note with a timestamp, the first and last visit, the number of visits (as a rule at most one per 30 minutes per case study) and the views per case study. Your IP address is not stored (except for the server log files, see 4.). The legal basis is my legitimate interest in showing non-public work only to selected people (Art. 6(1)(f) GDPR). Expired or deactivated links are deleted automatically after six months at the latest.

8. Links to LinkedIn

This website links to my LinkedIn profile. It is a simple link, not an embedded plugin: you are only taken to LinkedIn when you click it. LinkedIn is responsible for any processing there (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). For details, see the LinkedIn Privacy Policy.

9. Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

10. Your rights

You have the right at any time to:

  • access to your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

An informal e-mail to am@amdesigned.de is sufficient. You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for me:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
datenschutz.hessen.de

11. No obligation to provide data

You are not obliged to provide me with personal data. Without your e-mail address, however, I cannot reply to you. There is no automated decision-making or profiling.

Last updated: October 2026