Privacy Policy

Last updated: 16 June 2026

This policy reflects the current static website. A final review by a qualified lawyer is recommended before go-live under the production domain (GDPR / DSGVO).

This policy explains how Mohammed Hakimi IT ("we", "us") processes personal data when you visit this website. It does not cover the Corpograph product application, which is governed by a separate data processing agreement with our customers.

1. Controller

Mohammed Hakimi IT — Owner: Mohammed Hakimi
Schwalbenstraße 15, 63263 Neu-Isenburg, Germany
Email: contact.corpograph@gmail.com

Data protection officer

Not appointed — not legally required for an operation of this size (§ 38 BDSG). For privacy enquiries, contact contact.corpograph@gmail.com.

2. What we process and why

Data	Purpose	Legal basis (GDPR)
Server log data (IP address, date/time, page, browser/OS, referrer)	Deliver and secure the website, detect abuse	Art. 6(1)(f) — legitimate interest in a secure service
Contact / demo request data (name, email, message)	Respond to your enquiry	Art. 6(1)(b)/(f) — pre-contractual steps / legitimate interest
Web fonts (see §5)	Consistent typography	Art. 6(1)(f) — legitimate interest (or consent, if applicable)

We do not use advertising or tracking cookies in the current state of this site (see the Cookie Policy).

3. Recipients & processors

We share personal data only with service providers acting as processors under Art. 28 GDPR (e.g. hosting), and only where necessary. Current processors:

Hosting / CDN: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Email: Google Ireland Ltd. / Google LLC (Gmail), USA
Fonts: Google Fonts (Google Ireland Ltd. / Google LLC, USA) — see §5

4. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). The provider processes the data described above on our behalf as a processor under Art. 28 GDPR. Transfers to the USA are safeguarded by EU Standard Contractual Clauses (SCC).

5. Web fonts

This site currently loads fonts from Google Fonts, which may transmit your IP address to Google servers (potentially the USA). To avoid this, fonts can be self-hosted — recommended before go-live. Where consent is required, fonts load only after consent.

6. International transfers

Our hosting provider (Vercel Inc.) and Google process data in the USA. These transfers are safeguarded by EU Standard Contractual Clauses (SCC) together with supplementary measures where appropriate.

7. Retention

Server logs: approximately 30 days. Enquiries: as long as needed to handle your request and meet statutory retention duties, then deleted.

8. Your rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17)
Restriction (Art. 18) and data portability (Art. 20)
Objection to processing based on legitimate interest (Art. 21)
Withdraw consent at any time, without affecting prior processing
Lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, contact contact.corpograph@gmail.com.

9. Changes to this policy

We may update this policy to reflect changes to our processing or the law. The current version is always available on this page.