Legal Notice & Privacy Policy

2. Privacy Policy

Data Protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Web Hosting & Data Sovereignty

This website and its subdomains are hosted on a virtual private server provided by IONOS SE (Montabaur, Germany), with the server located in a data centre in Germany. The hosting provider acts as a processor under Art. 28 GDPR; a data processing agreement (Auftragsverarbeitungsvertrag) is concluded with that provider. The operator's private home network, residential connection, and personal devices do not run the server software, do not route user traffic, and do not store production data. No content-delivery network or third-party tracking service is used.

Data Protection Officer

A data protection officer is, to the operator's present assessment, not legally required for this website under Art. 37 GDPR or § 38 BDSG, as the processing is carried out by a single private individual and does not constitute large-scale systematic monitoring or large-scale processing of special categories of data. For all inquiries regarding data protection, please contact the controller directly.

Server Log Files

Each time this website is accessed, our web server writes an entry to a log file. An entry contains: the IP address, truncated to its first 24 bits (IPv4) or its first 48 bits (IPv6), and the source port; the date and time; the request method, the requested host and path including query parameters, and the protocol version; details of the TLS connection (such as the version, the cipher suite and the requested server name); the headers your browser sends, such as the browser identifier, the referrer URL and the preferred language, with the content of cookies and credentials replaced by a placeholder; the status code, duration and size of the response, the size of the request body, and the response headers. The host name of your computer is not recorded. This data is not merged with other data sources. The legal basis for the temporary storage of this data and the server log files is Art. 6(1)(f) GDPR, based on our legitimate interest in the security, stability, and error-free operation of our website. The server log files are stored for security reasons for a maximum of 7 days and are deleted automatically thereafter.

Contact by Email

If you write to us by email at info@mtorun0x7cd.com, we process your email address, your name if you give it, the content of your message and the technical details an email carries, in order to handle and respond to your request. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, for general enquiries, Art. 6(1)(f) GDPR (legitimate interest in responding). The mailbox is held with Apple iCloud Mail; the provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. According to Apple, personal data collected by Apple or an Apple-affiliated company worldwide is generally stored by Apple Inc. in the United States, and the international transfer by Apple of personal data collected in the European Economic Area, the United Kingdom and Switzerland is governed by Standard Contractual Clauses. Your message may therefore leave the European Economic Area. We delete your message once your request has been dealt with, unless statutory retention obligations require otherwise.

Responsible Party (Controller)

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Mert Torun, M.Sc. Contact: see Legal Notice above.

Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:
  • The right of access (Art. 15)
  • The right to rectification (Art. 16)
  • The right to erasure (Art. 17)
  • The right to restriction of processing (Art. 18)
  • The right to data portability (Art. 20)
To exercise any of these rights, please contact us using the details provided in the Legal Notice. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The competent supervisory authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf, email: poststelle@ldi.nrw.de.

Right to Object under Art. 21 GDPR

Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Please address your objection to the contact details given in the Legal Notice.

Last Updated

This privacy policy was last updated in October 2026.