top of page

Privacy policy

Last updated: 13 October 2026

This policy explains what personal data this website processes, why, and what rights you have. It applies to hakansulun.com.

 

1. Who is responsible

Hakan Sulun, Cologne, Germany
Email: hakan.sulun@outlook.com

This is my personal website. If you have any questions about your data, email me.

 

2. Hosting by Wix

This website runs on Wix, a website platform provided by Wix.com Ltd., 5 Yunitsman St., Tel Aviv, Israel. When you visit a page, Wix processes technical data that your browser sends, such as your IP address, the date and time, the page you open, the page you came from, and your browser and operating system. Wix needs this data to deliver the website, keep it secure and find errors, and keeps it only as long as these purposes require. Wix also gives me general statistics about visits, such as the number of visits, the pages viewed, the country and the type of device.

Wix processes this data on my behalf under a data processing agreement, which is part of Wix’s terms. The European Commission has decided that Israel ensures an adequate level of data protection. Where Wix transfers data to other countries without such a decision, it uses the EU standard contractual clauses.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is a secure website that works.

 

3. Cookies

Cookies are small files that your browser stores on your device. This website uses two kinds:

  • Necessary cookies set by Wix, which the website needs to work and stay secure (for example XSRF-TOKEN, svSession, bSession and ssr-caching). They are deleted at the end of your visit or after up to 12 months. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

  • Optional cookies and tools for analytics and advertising, described in section 5. They are only used if you agree. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time with the privacy settings button (fingerprint icon) at the bottom left of this page. Withdrawing consent does not affect processing that took place before.

 

4. Consent management (Usercentrics)

I use Usercentrics for Wix to ask for and record your consent. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Your choice is saved in your browser. Usercentrics also records your consent (a consent ID, the date and time, your choices and the banner language) on Google Cloud servers in Germany and Belgium and deletes these records after 12 months.

Legal basis: Art. 6(1)(c) GDPR together with Art. 7(1) GDPR (I must be able to prove consent) and § 25(2) no. 2 TDDDG.

 

5. Analytics and advertising (only with your consent)

The following tools load only after you agree in the cookie banner. If you decline, they do not load. In the banner, Hotjar is listed under “Analytical”; Google Analytics, the Google Ads tag and Google Tag Manager are listed under “Marketing”.

Google Analytics 4. Helps me understand how visitors use this website, for example which pages they view, for how long, which website they came from and which device they use. Google does not log or store the IP addresses of visitors from the EU; it uses them only to work out an approximate location and then discards them. Google Analytics sets cookies (_ga and _ga_ followed by an ID) that are stored for up to two years. Google deletes data linked to these cookies after the retention period set in my account, at most 14 months.

Google Ads tag. Measures whether visits to this website come from Google ads and, if remarketing is switched on in my Google Ads account, lets Google show ads to people who visited this site. It sets cookies such as _gcl_au, stored for up to 90 days, and Google may use its own advertising cookies.

Google Tag Manager. A tool that loads other tags on this website. It does not set cookies or analyse your data itself, but Google receives your IP address when your browser loads it.

These three services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.

Hotjar. Shows me how visitors use the pages, through heatmaps and recordings of mouse movements, clicks and scrolling. Hotjar does not record what you type into form fields and does not store your IP address; it identifies your browser with a random ID. Data is stored in the EU (Ireland). Hotjar sets cookies such as _hjSessionUser (up to 12 months) and _hjSession (30 minutes). Hotjar is part of the Contentsquare group; the parent company is Content Square SAS, 7 rue de Madrid, 75008 Paris, France.

Legal basis for all tools in this section: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG.

 

6. Contact form and email

If you use the contact form, I receive your name, email address, company (optional) and message. Wix stores the message in my Wix account and sends me an email notification. If you email me directly, I receive your email address and everything you write.

I use this data only to reply to you. You don’t have to give me your details, but without an email address I can’t reply. Legal basis: Art. 6(1)(b) GDPR if your message concerns a possible job or contract, otherwise Art. 6(1)(f) GDPR (my legitimate interest in answering messages).

I delete your message when our conversation is finished, at the latest 12 months after our last contact, unless the law requires me to keep it longer.

 

7. Links to LinkedIn

This website links to my LinkedIn profile. No data goes to LinkedIn until you click the link. After that, LinkedIn’s privacy policy applies.

 

8. Your rights

You have the right to:

  • access the data I hold about you (Art. 15 GDPR)

  • have incorrect data corrected (Art. 16 GDPR)

  • have your data deleted (Art. 17 GDPR)

  • restrict processing (Art. 18 GDPR)

  • receive your data in a portable format (Art. 20 GDPR)

  • object to processing based on legitimate interests (Art. 21 GDPR)

  • withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR)

To use these rights, email me at hakan.sulun@outlook.com.

You can also complain to a data protection authority, for example the one responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

 

9. Changes

I update this policy when the website or the law changes. The date at the top shows the latest version.

bottom of page