Privacy

The short version: this website sets no cookies, runs no analytics, and loads nothing from third-party servers. The only personal data I process is what you send me through the contact form or by e-mail.

Controller

Tumasyan UX Consulting, Inh. Shiraz Tumasyan
St.-Veit-Str. 53
81673 Munich, Germany
shiraz@tumasyan.com

Hosting and server log files

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The provider automatically collects and stores information in server log files that your browser transmits: browser type and version, operating system, referrer URL, host name, time of request and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in the technically error-free presentation and security of this website. Because the provider is based in the United States, this involves a transfer to a third country, based on the Standard Contractual Clauses of the European Commission under Art. 46 (2) (c) GDPR. A data processing agreement under Art. 28 GDPR is in place with the provider.

Cookies

This website sets no cookies and uses no local storage for tracking purposes. There is no consent banner because there is nothing to consent to.

Analytics

This website uses no web analytics, no tracking pixels and no advertising networks.

Fonts

The typefaces DM Sans and JetBrains Mono are hosted on this site's own server. No connection is made to Google Fonts or any other external font service, and therefore no data about your visit is transmitted to a third party for this purpose.

Contact form and e-mail

If you send me a message through the contact form, the data you enter (name, e-mail address, the content of your message and the options you select) is transmitted to me and stored for the purpose of processing your enquiry and for any follow-up questions. I do not pass this data on to anyone else without your consent.

The submission is processed by a function running on the infrastructure of my hosting provider, Vercel Inc., and is then delivered to my mailbox by the e-mail service Resend (Plus Five Five, Inc., 2261 Market Street, San Francisco, CA 94114, USA). The message is not stored in a form database: it is passed on as e-mail and kept in my mailbox. Both providers are based in the United States, so your data is transferred to a third country. Those transfers are based on the Standard Contractual Clauses of the European Commission under Art. 46 (2) (c) GDPR, and a data processing agreement under Art. 28 GDPR is in place with each. If you would rather not use the form, you can reach me directly by e-mail or telephone using the details in the imprint.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR, my legitimate interest in answering enquiries addressed to me. Your data remains with me until you ask me to delete it, withdraw your consent, or the purpose for storing it no longer applies. Mandatory statutory retention periods (in particular under commercial and tax law) remain unaffected.

External links

This site links to external services, including wonfolio.com, Calendly, LinkedIn, Instagram and YouTube. Following such a link takes you to a third-party site whose own privacy policy applies. No content from these services is embedded in this website, so no data is transmitted to them unless you actively follow a link.

Your rights

Under the GDPR you have the right to information about your stored data and its origin, recipients and purpose of processing (Art. 15), to correction (Art. 16), to deletion (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise any of these rights, write to shiraz@tumasyan.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is the data protection officer of the federal state in which I am based: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

SSL/TLS encryption

This site uses TLS encryption for all traffic. You can recognise an encrypted connection by the https:// prefix in your browser's address bar. When encryption is active, the data you transmit cannot be read by third parties.

Changes to this policy

I update this policy when the site changes, for example if I ever add analytics or an embedded service. This version is current as of August 2026.