Privacy Policy

We take the protection of your personal data seriously. This policy explains which data is processed when you visit this website and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is bySurf Studios, Jubaydur Rahman. The full address and contact details can be found in our legal notice. For privacy questions you can also write to hello(at)erickurt.com.

2. Summary

• We do not use cookies for tracking, analytics, or advertising.
• We do not use any analytics or tracking tools.
• Fonts, icons, and images are stored on our own server. No data is sent to Google Fonts, YouTube, or other third parties while you browse this site.
• There are no contact forms. If you email us, we only use your message to reply.

3. Hosting and server log files

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the site, Cloudflare automatically processes technical data that your browser sends, such as your IP address, date and time of the request, the requested page, referrer URL, browser type, and operating system. This data is needed to deliver the website securely and reliably, and to protect it against attacks and abuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a secure, fast, and stable website. We have concluded a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, and data transfers to the USA are additionally covered by the EU Standard Contractual Clauses. Cloudflare may set strictly necessary security cookies to tell humans and bots apart; this is permitted under § 25(2) TDDDG without consent. More information: cloudflare.com/privacypolicy.

4. Contact by email

If you contact us by email, we process your email address, name (if provided), and the content of your message in order to answer your inquiry and, where applicable, to prepare or carry out a project. The legal basis is Art. 6(1)(b) GDPR for inquiries related to a contract and Art. 6(1)(f) GDPR for all other inquiries. We delete this data once it is no longer needed, unless statutory retention periods (for example under German commercial and tax law) require us to keep it longer.

5. External links

This website links to external platforms such as YouTube and YTJobs. No data is transferred to these platforms until you click a link. Once you open an external site, the privacy policy of that provider applies.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

To exercise these rights, email us at hello(at)erickurt.com. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

7. SSL/TLS encryption

For security reasons this site uses HTTPS encryption. You can recognise an encrypted connection by the lock icon in your browser's address bar.

8. Changes to this policy

We may update this privacy policy when the website or legal requirements change. The current version is always available on this page.