Awais Bhatti
← Back to home

Privacy Policy

Last updated: June 2026

1. Controller

The controller responsible for processing your personal data on this website is:

Awais Bhatti
Berlin, Germany
Email: awaisbhatti01@icloud.com

If you have any questions about how your data is handled, contact me directly at the address above. I will respond within the timeframe required by applicable law (generally within one month).

2. What data we collect and why

This website collects personal data only where there is a lawful basis under Art. 6 GDPR. The following table describes each processing activity.

Contact form submissions

When you submit the contact form, we process your name, email address, and message content. Purpose: to respond to your enquiry. Legal basis: Art. 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering a contract, or Art. 6(1)(f) — our legitimate interest in responding to business enquiries. Data is transmitted via Resend (see section 5) and retained for as long as necessary to handle the enquiry, with a maximum retention period of 24 months.

Newsletter subscription

If you subscribe to the newsletter, we process your first name, last name, and email address. Purpose: to send you marketing communications about services, insights, and updates. Legal basis: Art. 6(1)(a) GDPR — your explicit consent. You may withdraw consent at any time by clicking the unsubscribe link in any newsletter email. Withdrawal does not affect the lawfulness of processing before withdrawal. Data is stored in Brevo (see section 5) and deleted promptly upon unsubscription.

Website analytics (Statistics cookies)

With your consent, we use Google Analytics 4 to collect anonymised usage data including pages visited, time on page, and general geographic region. Purpose: to understand how visitors interact with the site and improve its content. Legal basis: Art. 6(1)(a) GDPR — your consent via the cookie banner. You may withdraw consent at any time by clicking the fingerprint icon in the bottom-left corner of the screen.

Advertising (Marketing cookies)

With your consent, we use Google Ads and Meta Ads to display relevant advertisements and measure campaign performance. These services may place cookies that track behaviour across websites. Legal basis: Art. 6(1)(a) GDPR — your consent. You may withdraw consent at any time via the cookie preferences panel.

Functional / Preferences cookies

These cookies remember your settings, such as your chosen colour theme (dark or light mode). Purpose: to provide a consistent user experience across visits. Legal basis: Art. 6(1)(a) GDPR — your consent, or Art. 6(1)(f) — our legitimate interest in not showing a broken interface. No personal data is shared with third parties for this purpose.

Necessary cookies

Certain cookies are strictly necessary for the website to function — for example, storing your cookie consent preference itself. These are set without consent on the basis of Art. 6(1)(c) GDPR (legal obligation to record consent) or Art. 6(1)(f) (legitimate interest in operating the website). They do not track you for marketing purposes and cannot be disabled.

3. Cookies

This website uses cookies — small text files stored in your browser. You can manage your cookie preferences at any time by clicking the fingerprint icon in the bottom-left corner of the page, or via your browser settings.

Be aware that disabling all cookies may affect website functionality. Your consent choice is itself stored locally in your browser and expires when you clear your browser data.

For detailed information on the specific cookies set by third-party services, refer to the privacy policies of those services linked in section 5.

4. Google Tag Manager

This website uses Google Tag Manager (GTM) to manage and deploy tracking scripts. GTM itself does not collect personal data — it is a container that loads other scripts. All tracking tags within GTM are subject to GTM Consent Mode v2, meaning they only fire when you have given the relevant category of consent.

Default state: all consent categories are set to denied before any page content is loaded. Tags are only activated after you grant consent via the cookie banner.

5. Third-party processors

We share personal data with the following processors under data processing agreements (Art. 28 GDPR):

For processors located in the United States, transfers take place under the EU–US Data Privacy Framework (where applicable) or Standard Contractual Clauses (Art. 46 GDPR).

6. Your rights under GDPR

As a data subject under the GDPR, you have the following rights. To exercise any of them, contact me at awaisbhatti01@icloud.com.

  • Right of access (Art. 15)

    You may request a copy of the personal data I hold about you.

  • Right to rectification (Art. 16)

    You may request correction of inaccurate data.

  • Right to erasure (Art. 17)

    You may request deletion of your data where there is no overriding legal basis for retention.

  • Right to restriction (Art. 18)

    You may request that processing be restricted in certain circumstances.

  • Right to data portability (Art. 20)

    Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.

  • Right to object (Art. 21)

    You may object to processing based on legitimate interests at any time.

  • Right to withdraw consent (Art. 7(3))

    Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

  • Right to lodge a complaint

    You have the right to complain to a supervisory authority. In Germany, the relevant authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).

7. Data retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, or as required by law. Specifically:

  • Contact form data: up to 24 months after last contact
  • Newsletter subscriber data: until you unsubscribe
  • Analytics data: as configured in Google Analytics (default 14 months)
  • Cookie consent record: stored in your browser until you clear it

Where data is processed by third-party services, retention is also governed by those services' own policies.

8. Automated decision-making

This website does not engage in automated decision-making or profiling that produces legal or similarly significant effects (Art. 22 GDPR).

9. Changes to this policy

This policy may be updated periodically to reflect changes in the services used or applicable law. The date at the top of this page indicates when it was last revised. Material changes will be communicated via a notice on the website.

This privacy policy applies to https://awaisbhatti.com. For questions, contact awaisbhatti01@icloud.com.