Only the German version is legally binding.
Last updated: 7 October 2026
Kemal Duran
Maastrichter Str. 6-8
50672 Köln
Email: kd@kemalduran.de
No data protection officer has been appointed, as there is no legal obligation to do so. Please send privacy questions directly to the address above.
This site runs on a server in Germany and loads fonts and video from its own server. Google Analytics only starts if you agree in the banner. The Cal.com booking calendar only loads once you click it yourself on the booking page. We only receive your email address if you enter it for the AI guide, the prompt library or the AI-OS kit.
This site is hosted by dogado GmbH (Antonio-Segni-Straße 11, 44263 Dortmund, Germany), on servers in Germany. When you visit it, technically necessary data (IP address, time of access, page visited) is processed in server logs. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with dogado.
Your browser also transmits its type, your operating system and the previously visited page (referrer). Our legitimate interest is to deliver the site, find errors and fend off attacks. The logs are deleted after 7 days. The connection is TLS-encrypted, recognisable by “https://” in the address bar.
All fonts are hosted on our own server. There is no connection to Google Fonts or any other font service. The intro video is served directly from this website. No third-party players and no third-party cookies are embedded.
On your first visit, a banner asks for your consent. The site stores your choice (“Accept” or “Decline”) in your browser's Local Storage under “kd-consent”, so the banner does not reappear on every visit. This is necessary for the service you are using. Legal basis: Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR. The entry remains until you revoke it or delete your browser data.
The following are also stored only in your browser: your progress in the AI-OS wizard, the unlocking of the kit including the email address entered there and, if you choose it, your permission for the Cal.com calendar (“kd-cal”). These entries do not leave your device.
Done. Analytics is off, calendar permission deleted.
The button deletes your saved choice, stops Google Analytics immediately and removes its cookies on this domain. The banner will ask again on your next visit.
Only if you click “Accept” in the banner does this site load Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google records which pages you visit, how long you stay, your device, your browser and your approximate location, which Google derives from your IP address. According to Google, Google Analytics 4 does not store full IP addresses.
For this, Google sets the cookies “_ga” and “_ga_5L5RRMRBRF” with a lifetime of 2 years. Google deletes the analytics data after 14 months. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision under Art. 45 GDPR on 10 July 2023.
The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. If you click “Decline”, no analytics service is loaded. You can revoke your consent at any time with the button above. Processing carried out before then remains lawful.
You can enter your email address for the AI guide (home page and city pages), the prompt library (/werkzeuge/) and the AI-OS kit (/os/). We pass it on to the email service provider Brevo (Sendinblue SAS, 9-17 rue Salneuve, 75017 Paris, France; German branch Brevo GmbH, Köpenicker Str. 126, 10179 Berlin). Brevo processes the data on servers in the EU on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Brevo first sends you an email with a confirmation link (double opt-in). Only after you click the link is your address added to the list. So that we can prove the sign-up, Brevo stores the time and IP address of the sign-up and the confirmation. After that you receive the material you requested and emails about AI tools. Brevo measures whether an email was opened and which link was clicked, in order to evaluate the mailing.
Legal basis: Art. 6(1)(a) GDPR. Providing your address is voluntary; without it we send you nothing. You can revoke your consent at any time via the unsubscribe link in every email or by writing to kd@kemalduran.de. After you unsubscribe, your address is added to a block list so that you receive no further emails (Art. 6(1)(f) GDPR). To prevent abuse, our server limits the number of sign-ups per connection. For this it stores an irreversible hash of the IP address with timestamps that expire after 10 minutes.
For booking calls, the Cal.com booking calendar (Cal.com, Inc., USA) is embedded on the page /en/book/. It only loads once you click “Load calendar”. From then on, your browser connects to Cal.com and transmits your IP address and information about your browser and device. The legal basis for loading it is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
When you book, Cal.com processes your name, your email, the time you choose and your note. If you filled in the project check beforehand, your answers are included in this note; you see them before submitting. The legal basis for the booking is Art. 6(1)(b) GDPR. The transfer to the USA is based on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR. We delete the booking data once the call has taken place and no retention obligation applies. If you prefer not to use Cal.com, simply write to kd@kemalduran.de.
The call itself takes place via Google Meet (Google Ireland Limited). You receive the link with the confirmation. When you join, Google processes your name, IP address, audio and video. Legal basis: Art. 6(1)(b) GDPR.
The project check runs entirely in your browser. Your answers only go to Cal.com if you book a call from it, see above.
If you write to kd@kemalduran.de, we process your address and the content of the email in order to reply. The legal basis is Art. 6(1)(b) GDPR if it concerns an engagement, otherwise Art. 6(1)(f) GDPR. We delete the email once the matter is settled. We keep business correspondence for 6 to 10 years under Section 257 HGB (German Commercial Code) and Section 147 AO (German Fiscal Code).
Instagram, TikTok, YouTube, LinkedIn and other services are included only as plain links. No data flows to them when you open this site. Only when you click a link do the privacy rules of the respective provider apply.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can revoke any consent at any time with effect for the future (Art. 7(3)). An email to kd@kemalduran.de is enough.
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
There is no automated decision-making or profiling under Art. 22 GDPR.