Privacy Policy
Last updated: 3 July 2026
Introduction
This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit this personal developer portfolio website (the “Website”).
The Website is operated by Raiyan Mahfuz and presents projects, skills, experience, and contact information. This policy is intended to comply with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP).
By using the Website, you acknowledge that you have read this Privacy Policy.
Data Controller
Raiyan Mahfuz
8046 Zürich
Switzerland
Email: sadgidmahfuz@gmail.com
Personal Data We Collect
Depending on how you use the Website, the following categories of personal data may be processed:
| Category | Examples | How it is collected |
|---|---|---|
| Contact data | Name, email address, subject, message | Contact form submission |
| Technical data | IP address, browser type, device type, referrer URL, access time | Automatically when visiting the Website |
| Communication data | Content of messages you send | Contact form or email |
We do not intentionally collect special categories of personal data through this Website.
Contact Form
When you use the contact form, we process the data you provide — your name, email address, subject, and message — to receive and respond to your enquiry.
Messages are delivered using EmailJS. Personal data entered in the form is transmitted to EmailJS for the purpose of forwarding your message. EmailJS may process data on servers outside Switzerland or the European Economic Area.
- Provider: EmailJS (EmailJS.com)
- Privacy policy: https://www.emailjs.com/legal/privacy-policy/
Legal basis (GDPR): Article 6(1)(b) GDPR (responding to your request) and Article 6(1)(f) GDPR (legitimate interest in operating the Website and handling enquiries).
Legal basis (Swiss nFADP): Processing is necessary to respond to your request or based on overriding legitimate interests.
Email Communication
If you contact us directly by email at sadgidmahfuz@gmail.com, we process the personal data contained in your message to handle your request. Emails are retained only as long as necessary.
Server Log Files
When you access the Website, the hosting provider may automatically record technical information, including:
- IP address
- Date and time of the request
- Requested page or file
- Browser and operating system
- Referring website
This data is processed to ensure the security and proper operation of the Website.
Legal basis (GDPR): Article 6(1)(f) GDPR (legitimate interest in secure website operation).
Web Hosting
The Website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States.
Vercel processes personal data on our behalf to deliver the Website. Further information is available at: https://vercel.com/legal/privacy-policy
Cookies
This Website uses only cookies and local storage that are strictly necessary for its operation. We do not use analytics, marketing, or advertising cookies.
Your browser may store technical data required for basic functionality. You can manage cookies through your browser settings.
Fonts
Typography is provided through Next.js font optimisation, which self-hosts Playfair Display and DM Sans on the Website server. When fonts are self-hosted, no connection to third-party font servers is established when you load a page.
Fonts are licensed under the SIL Open Font Licence 1.1.
External Links
This Website contains links to external websites such as GitHub, LinkedIn, and project demos. We have no control over third-party websites and are not responsible for their privacy practices. Please review the privacy policies of any external site you visit.
Social Media Links
The Website displays links to social media profiles on LinkedIn and GitHub. These are standard links. When you visit those platforms, their own terms and privacy policies apply.
Data Retention
| Data type | Retention |
|---|---|
| Contact form submissions | Until the enquiry is resolved, then deleted |
| Email correspondence | As long as necessary for the communication |
| Server log files | According to Vercel’s retention settings |
Data Security
We use HTTPS encryption and rely on reputable hosting and service providers to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure.
International Data Transfers
Personal data may be processed in countries outside Switzerland and the European Economic Area, including the United States, through our hosting provider (Vercel) and contact form service (EmailJS). Appropriate safeguards such as Standard Contractual Clauses may apply depending on the provider.
Your Rights
Under the GDPR and Swiss nFADP, you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure where applicable
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — https://www.edoeb.admin.ch
EU/EEA: Contact your local data protection authority — https://edpb.europa.eu/about-edpb/board/members_en
To exercise your rights, contact: sadgidmahfuz@gmail.com
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The date at the top indicates the latest revision. Continued use of the Website after changes take effect constitutes acceptance of the updated policy.
Contact
Raiyan Mahfuz
8046 Zürich, Switzerland
Email: sadgidmahfuz@gmail.com