1. Controller
The controller responsible for the personal-data processing described in this policy is:

This policy explains personal-data processing associated with the personal website at www.sambeklik.com, including website delivery, contact correspondence, cookies and external content.

2. Hosting and technical information
This website uses Hostinger for hosting and email services.

The provider identified for these services is:
HOSTINGER operations, UAB
Švitrigailos str. 34
03230 Vilnius
Lithuania

When you visit the website, the hosting infrastructure processes information necessary to deliver website content and maintain security. Technical information can include your IP address, request date and time, requested pages or files, browser and operating-system information, referring page, and technical response or error information.

The purposes are website delivery, availability, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is operating a reliable and secure website.

Technical records are retained according to their operational and security purpose and the hosting service’s retention arrangements. Records concerning a specific incident may be retained for as long as necessary to investigate it or establish, exercise or defend legal claims.
Further information about Hostinger’s processing arrangements is available in its Privacy Policy and Data Processing Addendum.

3. Contact form and email
When you contact us through the contact form or by email, we process the information you provide. This includes your name, email address, subject, message and any attachments.

This information is used to respond to your inquiry and handle related correspondence. Hostinger provides the email service used for this communication. Where an inquiry concerns a contract or steps requested before entering a contract, the legal basis is Article 6(1)(b) GDPR. For other correspondence, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is responding to inquiries and maintaining relevant professional communication.

Providing information is voluntary, but sufficient contact details and information are necessary to respond. Correspondence is retained for as long as necessary to resolve the inquiry and related follow-up. Relevant records may be kept longer where statutory retention obligations apply or where necessary to establish, exercise or defend legal claims. Records are deleted when these reasons no longer apply.

4. Cookies and CookieYes
This website uses CookieYes to present cookie choices and manage preferences. Cookies are small files stored on your device. Similar technologies can also store or access information on your device. Under § 165(3) Austrian TKG 2021, storage or access strictly necessary to provide a service you expressly request may be permitted without consent. Non-essential storage or access requires prior consent. Where personal-data processing relies on consent, the legal basis is Article 6(1)(a) GDPR. Displaying the cookie banner, continuing to browse or remaining on the website does not itself constitute consent. You can express your preferences through the cookie banner and revisit them through Cookie Settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

CookieYes is provided by:
CookieYes Limited
3 Warren Yard, Warren Park
Wolverton Mill
Milton Keynes, MK12 5NW
United Kingdom

The preference mechanism stores information about your cookie choices. The information processed depends on the plugin configuration and can include preferences, a consent identifier and a timestamp. Cloud-connected configurations can also involve processing by CookieYes.
Processing necessary to demonstrate compliance with consent requirements is based on Article 6(1)(c) GDPR. Other processing necessary to operate the preference mechanism is based on Article 6(1)(f) GDPR, reflecting the legitimate interest in respecting visitors’ choices.

Cookie names, purposes and durations are described in the website’s Cookie Settings. Cookies expire according to their configured duration and can also be removed through your browser. Removing preference cookies may cause the banner to appear again.
Provider information is available in CookieYes’s Privacy Policy.

5. Google Fonts
This website uses Google Fonts to display typefaces.

Where font files are hosted locally, displaying those files does not require a connection to Google’s font servers. Where fonts are requested directly from Google, your browser connects to Google’s servers. Google receives your IP address and technical information associated with the font request.
The purpose is displaying the selected typefaces. External font loading involves a separate disclosure of data to Google; it is not made lawful merely by displaying a cookie banner.

For external loading based on consent, the legal basis is Article 6(1)(a) GDPR. Consent must precede the relevant disclosure. The font files themselves may remain in your browser’s cache according to its caching settings.

Further information is available in Google’s font privacy information.

6. Embedded YouTube videos
This website includes embedded YouTube videos to present artistic work and related content.
For users in the European Economic Area, the relevant consumer-service provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When an embedded player connects to Google, information such as your IP address, the page containing the video, and browser or device information is transmitted. Depending on the player configuration and your settings, cookies or similar technologies can also be used.
If you are signed into a Google account, Google may associate activity with that account. For optional video processing based on consent, the legal basis is Article 6(1)(a) GDPR. Consent-required storage or access on your device is governed by § 165(3) TKG 2021. Such consent must be obtained before the relevant processing begins.

Information about Google’s processing and retention practices is available in Google’s Privacy Policy.

7. Google reCAPTCHA
This website uses Google reCAPTCHA to protect forms against automated submissions, spam and abuse.

When reCAPTCHA runs, it processes technical and interaction information to assess whether a request is likely to come from a person or an automated system. Depending on the implementation, this can include an IP address, browser and device information, interactions with the page, and cookies or similar identifiers.

Necessary and proportionate security processing can be assessed under Article 6(1)(f) GDPR, reflecting the legitimate interest in protecting the website and communication channels. Processing that requires consent must instead meet the applicable consent requirements, including § 165(3) TKG 2021 for device storage or access.

The description “spam protection” does not, by itself, establish that every processing operation or cookie is strictly necessary.

Since 2 April 2026, Google acts as a processor for reCAPTCHA Customer Data under the applicable Google Cloud terms and data-processing arrangements. Sam Beyglikli remains the controller for the website’s use of the service.
You can also contact us directly at legal@sambeklik.com.
Further information is available in Google’s current reCAPTCHA documentation.

8. LiteSpeed Cache and WooCommerce
This website uses LiteSpeed Cache to improve loading performance by storing temporary copies of website content. Hosting-related processing is described in Section 2.

WooCommerce software is also installed on the personal website. Its built-in analytics functionality concerns commerce records, such as orders and sales. The presence of that functionality does not, by itself, establish that a separate website-visitor tracking service is used.

Cookies associated with any activated functionality remain subject to the necessity and consent requirements described in Section 4.

Transactions through the separate shop are governed by that shop’s privacy information.

9. Photographs depicting individuals
Photographs in which people are identifiable constitute personal data.
The purpose of publication is documenting and presenting artistic work, projects and the creative process. Where publication is based on the depicted person’s consent, the legal basis is Article 6(1)(a) GDPR.
Published photographs are accessible to website visitors worldwide. Other people may independently copy publicly available images.
Photographs are retained and published for as long as they serve their documentation or presentation purpose and a valid basis for continued processing exists.

Where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal.

For questions or requests, contact legal@sambeklik.com and identify the relevant image.

10. Recipients and international processing
Personal data are processed by the providers identified in this policy where their respective services are used. Providers acting on our behalf are subject to applicable data-processing arrangements.

Information may also be disclosed to authorities where legally required, or to professional advisers where necessary for a properly justified legal matter.

Some services can involve processing outside the European Economic Area, including processing by Google in the United States. A provider’s European address does not guarantee that all processing takes place within the EEA.

Transfers outside the EEA require a valid mechanism under Chapter V GDPR, such as an applicable adequacy decision or appropriate safeguards. Consent to an optional website feature does not automatically replace those requirements.

Information about the applicable processing arrangements and safeguards can be requested at legal@sambeklik.com.

11. Your rights
Subject to the applicable legal conditions, you have the right to:
Obtain access to your personal data.
Request correction of inaccurate data.
Request erasure.
Request restriction of processing.
Receive data in a portable format where applicable.
Object, on grounds relating to your particular situation, to processing based on legitimate interests.
Withdraw consent at any time, without affecting the lawfulness of earlier processing.

Requests may be sent to legal@sambeklik.com.

You may also complain to a supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement.

The Austrian supervisory authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

Website: dsb.gv.at
Email: dsb@dsb.gv.at

12. Security and updates
This website uses HTTPS to encrypt information transmitted between your browser and the website. No transmission or storage method can guarantee absolute security. This policy is updated when relevant processing activities, services or legal requirements change. The current version is available on this website.