Privacy policy
Last updated: 2026-10-16
1. Who is responsible
The controller for this website (bawsala.dev) under the EU General Data Protection Regulation (GDPR) is:
Yomna Sonbul, Bawsala[Straße und Hausnummer], [PLZ Ort], Deutschland
Email: hello@bawsala.dev
2. What we process, and why
Visiting the site
The site is hosted on Cloudflare (Cloudflare, Inc., USA, with servers in the EU and worldwide). When you open a page, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time of the request, to deliver the site and protect it from attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under a data processing agreement and EU standard contractual clauses.
Bot protection on the contact form (Cloudflare Turnstile)
To keep spam out, the contact form uses Cloudflare Turnstile, which checks technical signals from your browser (for example IP address and browser characteristics) without a puzzle. Legal basis: Art. 6(1)(f) GDPR.
Contact form
When you send the form we receive your name, business name (optional), WhatsApp number, your message and the language you used. We use it only to answer your request and to prepare an offer (Art. 6(1)(b) GDPR). The message is delivered by email through Cloudflare Email Routing to our mailbox at Google Workspace (Google Ireland Ltd.). We keep enquiries for up to 12 months after the last contact, or longer if a contract follows and the law requires it.
The WhatsApp buttons open a chat with us in WhatsApp (WhatsApp Ireland Ltd., part of Meta). WhatsApp's own privacy policy applies to that app and the data it processes. We use what you send us there only to answer you and to carry out the work you ask for.
Rafeeq live demo
When the live demo is enabled on this site, the messages you type are sent to our server on Cloudflare and from there to Anthropic PBC (USA) to generate the reply. Do not enter personal, health or payment data in the demo. We do not store demo conversations; a counter keyed by your IP address is kept for up to 48 hours only to limit abuse. Legal basis: Art. 6(1)(f) GDPR. Transfers to the USA are covered by EU standard contractual clauses.
Fonts, cookies and local storage
Fonts are served from our own domain; no request goes to Google Fonts or other font services. The site sets no cookies. Your currency choice on the offers section is saved in your browser's local storage and never sent to us.
3. Your rights
You can ask us for access to your data, correction, deletion, restriction of processing and data portability, and you can object to processing based on legitimate interest. Write to hello@bawsala.dev. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or where the controller is based.
4. Changes
We update this policy when the site or the services behind it change. The date at the top shows the current version.