Privacy notice

Who is responsible

Mustafa Faiz Qadria operates mfq.me as a personal, independent project and is responsible for the processing by this site described here.

Whether post addressed to Mustafa personally reliably reaches him at this c/o address is still being checked.

In short

• mfq.me has no account, contact form, analytics, advertising or tracking, and it sets no cookies.
• The server keeps an access log of requests. What it records, and for how long, is described below.

Hosting and the access log

MFQ Consulting UG (haftungsbeschränkt) holds the Akamai Cloud (formerly Linode) account used to host mfq.me. The company's published privacy notice identifies Akamai Technologies International AG, Grafenauweg 8, 6300 Zug, Switzerland as its hosting provider. Mustafa Faiz Qadria operates mfq.me personally and is responsible for the processing described here. The server is in Frankfurt, Germany.

Opening a page or loading a file sends a request to the server. For each request, the proxy that receives it records your IP address, the time, the requested host name and path, the request method, the response status, how long the response took and an internal routing name. The log also contains a log timestamp, severity level and message field. The log excludes query values and request headers such as your browser’s user agent.

The access log is used only to keep the site secure and available, investigate technical faults and prevent abuse. The legal basis is Article 6(1)(f) of the GDPR: the operator’s legitimate interest in running a secure and reliable website.

The access log is rotated daily or sooner when it exceeds 10 MB. Up to five rotated files are kept; files older than five days are removed during rotation. With normal operation, the active file and archives cover approximately six days or less. Rotation checks run every five minutes; a failure can delay deletion. File permissions restrict access to the server administrator. The hosting provider’s own access is described below.

• Akamai states that its Data Processing Agreement forms part of its customer terms and covers its processing of customer content and cloud-computing logs, including authorised sub-processors.
• Akamai’s processing overview states that cloud-computing logs are processed on backend systems in the United States and retained for as long as necessary for security purposes, without a fixed number of days. Support may involve international teams and ticket systems in the United States.
• For its own service logs, Akamai describes retention of up to 90 days in most cases, up to 180 days for certain security events and up to three years for aggregated traffic-analysis and forensic data. These periods are separate from this website’s proxy access-log retention.
• Akamai publishes its authorised sub-processors and international-transfer safeguards in its Trust Center. The applicable providers depend on the cloud products and support services used.
• The optional Linode Backups service is disabled for this server.

Akamai Trust Center

In your browser

mfq.me is a personal page. It has no contact form, account, analytics, advertising or content embedded from other sites. It sets no cookies and uses no browser storage or service worker, although your browser may keep its files in its ordinary cache. Its fonts and images come from mfq.me itself.

Contacting the operator

If you email mustafa@mfq.me, Mustafa uses your email address, any name and information you include, and your message to read and answer your enquiry. The legal basis is Article 6(1)(f) of the GDPR: his legitimate interest in responding to enquiries about his work and professional opportunities.

Contacting him is voluntary; no law or contract requires these details. Without a return address and enough information, he may be unable to reply. Only Mustafa handles incoming enquiries, using Spacemail and Thunderbird. Ordinary resolved enquiries are deleted no later than six months after resolution, unless retention is required by law or for a specific legal matter.

If you call Mustafa, send an SMS or choose to contact him through WhatsApp, he uses your number, any name you give and what you say or write, including a voicemail if you leave one, to answer your enquiry. The mobile number is a Vodafone Business line with Premium Mailbox enabled. If you use WhatsApp, WhatsApp also processes your message under its own privacy policy. The basis for Mustafa’s handling is Article 6(1)(f) GDPR: his legitimate interest in answering enquiries about his work and professional opportunities. Contact is voluntary. He does not currently delete information retained from calls or messages as a routine practice; no fixed retention period has been set.

If you contact Mustafa through LinkedIn, LinkedIn processes that message under its own privacy policy.

Links to other sites

mfq.me links to other websites, such as LinkedIn. Nothing from those sites is embedded. If you follow a link, the other site receives your request, and its own privacy practices apply.

Your rights

Under the EU General Data Protection Regulation you can ask for access to personal data about you, for its correction or erasure, for its processing to be restricted and for a copy in a portable format. Where processing is based on legitimate interests, you can object to it. Write to mustafa@mfq.me.

You also have the right to complain to a data protection supervisory authority.