Privacy policy
Last updated: October 2026
This is a translation for your convenience. In case of doubt, the German version applies.
1. Controller
Ibrahim Can Gezek
IBOCAN WEB
Düsseldorferstraße 5, 40721 Hilden, Germany
Email: kontakt@ibocan-web.com
2. Hosting, database and server log files
This website is operated by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit it, Vercel processes technically necessary data (IP address, time, page requested, browser identifier) to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement is in place with Vercel; transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses.
Details from enquiries, appointment bookings and callback requests are stored in a database run by Neon Inc. in the Frankfurt am Main region (EU), likewise on the basis of a data processing agreement.
3. Enquiry form and email
If you use the enquiry form or write to me, I process your details (name, email address, optionally phone number and company, your topic and your message) to answer your enquiry and prepare a quote. I store the enquiry in the database and receive it by email via my mailbox at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request). I delete the data as soon as it is no longer needed and no statutory retention obligations apply.
4. Appointment booking
If you book an initial call online, I store the appointment, your name, email address, optionally your phone number, company and topic, and the type of call you chose. You receive a confirmation by email with a calendar file and a personal cancellation link. The legal basis is Art. 6(1)(b) GDPR. I delete cancelled and past appointments as soon as they are no longer needed.
5. Callback request
If you request a callback, I process your name, phone number, preferred time window and optionally your topic in order to call you back. The legal basis is Art. 6(1)(b) GDPR. I delete the details once your request has been dealt with.
6. WhatsApp
The WhatsApp button is a simple link. WhatsApp only opens when you click it; no data is transferred to WhatsApp beforehand. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, a company of the Meta group. If you write to me via WhatsApp, WhatsApp processes your message and phone number under its own terms; this may involve a transfer to the USA. The legal basis is Art. 6(1)(a) GDPR. Alternatively, you can reach me by email, phone or form.
7. Protection against abuse
To protect the forms and the admin login against automated attempts and spam, I briefly store a non-reversible hash of your IP address or email address together with the time of the login attempt or form submission. These entries are deleted after 24 hours at the latest. The legal basis is my legitimate interest in the security of this website (Art. 6(1)(f) GDPR).
8. Cookies, local storage and Google Analytics
Your choice in the cookie notice is only stored locally in your browser. It is not transmitted to me.
Only if you click “Accept” in the notice is Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland loaded. It helps me understand which pages are used (e.g. number of visits, pages viewed, approximate origin, device type). Google processes IP addresses in shortened form. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time via “Cookie settings” in the footer. Without consent, no connection to Google is established.
Audience measurement with Vercel Web Analytics
Independently of this, I use Vercel Web Analytics (Vercel Inc.) to count how often which pages are viewed. No cookies are set and no data is stored in your browser. Instead of your IP address, only an identifier is created that is discarded after 24 hours at the latest, so you are not recognised across pages or over several days. Only the page viewed, referring page, country, browser, operating system and device type are recorded. The legal basis is my legitimate interest in a functioning, user-friendly website (Art. 6(1)(f) GDPR).
9. Fonts
All fonts are loaded from this server. There is no connection to Google Fonts or other font providers.
10. SSL/TLS encryption
This website uses SSL/TLS encryption. Data you transmit cannot be read by third parties.
11. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), as well as the right to withdraw any consent you have given. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.