Legal
Privacy Policy
How this site handles the small amount of personal data it processes — in plain language, and honest about what actually happens.
Last updated: May 2026
This site is my personal portfolio. It collects as little personal data as possible — essentially only what you choose to send me through the contact form. This policy explains what I collect, why, and the rights you have under the GDPR.
Who is responsible
I, Mehdi Daustany, based in Amsterdam, the Netherlands, am the data controller for this site. For any privacy question or request, email me at m@daustany.com.
What the contact form collects
When you submit the contact form, I receive the details you enter: your name, your email address, an optional subject and topic, and your message. I only receive this when you choose to send it — nothing is collected in the background.
Why I process it, and the legal basis
I use these details for one purpose: to read your message and reply to you. The legal basis is your consent in sending the message, together with my legitimate interest in responding to enquiries about my work. I don’t use them for marketing.
How your message is handled
Submissions are delivered to my own inbox by email through Gmail / Google Workspace. You may also receive an automated confirmation copy of your message (an auto-reply) so you have a record. I never sell, rent, or share your details, and there’s no third-party advertising or profiling.
Cookies and local storage
There are no analytics or tracking cookies on this site. The only data stored in your browser is strictly functional: a cookie that remembers your language choice, and a theme preference (light or dark) kept in local storage. Because none of this is used for tracking, no cookie-consent banner is needed.
How long I keep it
I keep your message only as long as I need it to handle our conversation and any follow-up. When it’s no longer needed, I delete it.
Your rights
Under the GDPR you can ask me to access, correct, delete, or restrict your personal data, object to its processing, or receive a copy of it. Email me at m@daustany.com and I’ll respond promptly. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security and hosting
The site runs on my own hardened server over HTTPS, with strict security headers. The only external processor involved is Google (Gmail / Google Workspace), which carries your message to my inbox.
Changes to this policy
If the site’s data handling changes, I’ll update this page and the date above.