Caglar Demir (the "controller"). Contact for privacy requests: use the contact link on the home page (LinkedIn) until a dedicated address is published here. A full imprint will be added to this site.
This website presents my professional background. It offers an AI assistant (chatbot) that answers questions about it. To use the assistant you must sign in with Google, to keep out bots and abuse and to limit cost.
| Data | Purpose | Basis (GDPR) | Retention |
|---|---|---|---|
| Browsing the page: IP address and request data in server logs of the hosting provider | Delivering the site, security | Art. 6(1)(f) legitimate interest | Provider's short log retention |
| Google sign-in: we verify your Google ID token and store your Google account's unique ID, email address and name. | Access control, abuse prevention, replying to you | Art. 6(1)(b)/(f) (providing the requested service, security) | 12 months after your last visit. The session token lives in your browser tab only (up to 8 hours) |
| Chat messages you type and the assistant's replies, with technical data (time, model, token counts, cost) | Sent to the AI provider to produce an answer; stored by us to operate and improve the assistant and to understand usage | Art. 6(1)(b) providing the requested service; Art. 6(1)(f) improving the service | 12 months, then deleted automatically |
| Message form ("Leave a message" in the chat, signed-in users only): the email address and message you enter, plus a record of your consent | Replying to your message | Art. 6(1)(a) consent | 12 months, then deleted automatically |
| Anonymous site statistics: page views, the referring website's domain, clicks on outbound links, which menu sections are opened, clicks on the email link. Only aggregate counts per day; no cookies, no IP address, no user ID. Not collected if your browser sends Do-Not-Track or Global Privacy Control. | Understanding which content is of interest | Art. 6(1)(f) legitimate interest (no personal data is stored) | 12 months, then deleted automatically |
| Usage counters (pseudonymous user ID or IP address with request counts) | Rate limits, daily cost budget, abuse prevention | Art. 6(1)(f) legitimate interest | Between 1 minute and about 25 hours, then deleted automatically |
| Bot check (Cloudflare Turnstile): technical browser signals | Distinguish humans from bots | Art. 6(1)(f) legitimate interest | Handled by Cloudflare |
We do not use advertising or analytics cookies. The sign-in token is kept in your browser's session storage and removed when you close the tab.
Conversations and the account data above are stored in a database in the EU (Frankfurt) for 12 months and then deleted automatically. You can ask me at any time to delete your stored conversations and account data by contacting me (see section 1); I will do so without undue delay. We will never sell or pass on email addresses or conversations to third parties for their own purposes. Please do not enter sensitive personal data.
Some of these providers are located in the USA or may process data there. Transfers rely on the EU-US Data Privacy Framework or standard contractual clauses, where available.
You are talking to an AI system, not to a person. Answers may be wrong. It can only answer from a prepared knowledge base about my professional background and makes no binding statements. Please do not enter sensitive personal data (health, religion, etc.) or other people's data.
You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest, and to withdraw consent at any time. You can complain to a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
This policy will be updated when the service changes.