Privacy policy
This privacy policy explains which personal data is processed when you visit this portfolio or get in touch. Last updated: 14 October 2026.
Data controller
Hadi Noureddine
Badenweilerstraße 8, 79115 Freiburg im Breisgau, Deutschland
hadinoureddine743@gmail.com
Hosting and access data
This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit, Cloudflare receives your IP address and technical request information, such as the requested address, time and browser information. This processing serves to deliver the website and protect it against disruptions and attacks. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the secure and reliable operation of this portfolio.
The website itself does not maintain an additional access database. Cloudflare’s Data Processing Addendum governs processing on my behalf. Cloudflare and its subprocessors process data as needed to provide the services. Retention depends on the processing purpose, contractual obligations and legal requirements. Cloudflare does not publish a single retention period in days that applies to all Pages access data.
Transfers outside the EU
Cloudflare also processes data outside the European Union, particularly in the United States. For US transfers, Cloudflare refers to its EU-US Data Privacy Framework certification; where required, EU Standard Contractual Clauses and supplementary safeguards apply. Details and contractual safeguards are described in the following provider information.
Cloudflare privacy policy
Cloudflare Data Processing Addendum
Fonts, media and appearance
Fonts and media are served by the website host. The website does not embed advertising trackers, analytics scripts or contact forms. If you manually select a light or dark appearance, only “light” or “dark” is stored locally in your browser under “nourdev-theme”. This setting is not sent to a server and remains until you clear the website data in your browser. Storage serves to provide the appearance you explicitly selected (Section 25(2)(2) TDDDG). Without a manual selection, the appearance follows your system preference and no setting is stored.
Email contact
The email link opens your email application. If you write to me, I process your email address, your name if provided, and your message content and metadata to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other enquiries. My legitimate interest is handling messages addressed to me. Providing this information is voluntary; without a way to contact you, I cannot reply.
I use Gmail, provided by Google Ireland Limited, to receive and send email. Google processes the messages, and processing outside the EU, particularly in the United States, is possible. Google describes its safeguards for international transfers in the information linked below. I delete correspondence once the matter is resolved and no further communication is expected, unless statutory retention obligations or necessary retention to establish, exercise or defend legal claims apply. Google’s privacy policy provides further information about its processing and deletion practices.
Google privacy policy
Google: data transfer frameworks
External links
External websites are opened only when you follow their links. Their operators are responsible for data processing on those websites.
Your privacy rights
Subject to the statutory conditions, you have the right to access your personal data, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). Where processing relies on your consent, you may withdraw it at any time with effect for the future. To exercise your rights, contact me at the email address above. There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR.
Right to object
Where your data is processed under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). I will then stop processing the affected data unless I demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Complaints to a supervisory authority
You may lodge a complaint with a data protection supervisory authority, particularly in the member state of your habitual residence, place of work or the alleged infringement (Article 77 GDPR). The authority for my location is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: Heilbronner Straße 35, 70191 Stuttgart, Germany; email: poststelle@lfdi.bwl.de.