Privacy notice
How personal data is processed in connection with Fahaddeartist.
1. Controller
Muhammad Fahad Khan, Fahaddeartist, Treuenbrietzener Str. 7, 13439 Berlin, Germany. Email: hey@fahaddeartist.com. Phone: +49 178 164 1429.
2. A data-minimising website
This website contains no analytics, advertising or tracking scripts, contact form, user account, newsletter subscription or online checkout. Images, fonts and video files are served locally through the site. There are no embedded external platforms. The website code does not collect or transmit visitor profiles or usage statistics. Necessary hosting connection data and information you voluntarily send when contacting me are separate.
3. Hosting and delivery
The site uses OpenAI’s ChatGPT Sites and Cloudflare infrastructure. OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, is identified as controller for EEA users in its European notice. Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, provides delivery and security infrastructure. Requests include IP address, URL, time and browser data. My use supports secure delivery under Article 6(1)(f) GDPR. Providers may also process data for their own security and legal purposes; their notices are linked below.
4. Email, telephone and project enquiries
When you contact me, I process your contact details and message to respond and, where relevant, prepare a proposal or deliver a project. Pre-contractual and contractual enquiries rely on Article 6(1)(b) GDPR. Other business communication relies on my legitimate interest under Article 6(1)(f). Contact details are necessary for a reply; additional information is optional. Email and telecommunications providers involved in delivering the communication may receive the data.
5. Calendly appointments
The booking link opens Calendly, LLC, USA. Calendly is not embedded in this website and is contacted only when the link is opened. Bookings involve your name, email, appointment details and optional messages to organise the conversation. My processing relies on Article 6(1)(b) GDPR, or Article 6(1)(f) for other business communication. Calendly explains its own processing in the notice linked below. Email and telephone are available as alternatives.
6. YouTube: an external link only
The client video is represented by a locally stored preview image. No YouTube player or script is embedded. Clicking the Play icon opens YouTube in a new tab, leaving this website. Google’s privacy notice applies there. Simply visiting this website does not connect to YouTube, and the external link does not send referrer information.
7. Local media and browser functions
The hero video, preview images and fonts come from this website. The in-memory playback counter only controls video repetitions; it does not count visitors and is neither stored nor transmitted. Navigation, accordions and animations run locally in the browser. No cookies, local-storage entries or tracking pixels are added by the site code. Technical processing by the hosting provider remains separate.
8. Hosting and possible international processing
Even a website without tracking needs a hosting provider to deliver pages to your browser, which involves your IP address. OpenAI and Cloudflare infrastructure may process data outside the EEA, including in the United States. OpenAI describes adequacy decisions and standard contractual clauses, while Cloudflare refers, among other safeguards, to the EU-US Data Privacy Framework. This infrastructure processing is separate from my website code. The linked notices explain safeguards and provider contacts. External services such as Calendly and YouTube are accessed only when you choose to open their links.
9. Retention
I retain enquiries and project data for as long as needed to respond, deliver the work or settle the engagement. Data is then deleted unless legal retention duties or legitimate reasons, such as resolving outstanding claims, require otherwise. Retained records are restricted to the relevant purpose. Platform providers retain technical data according to operational, security and legal needs; their notices explain the criteria. My website code does not maintain a persistent browsing-history database.
10. Your rights
Subject to the statutory conditions, you can request access, correction, deletion, restriction and data portability. You can withdraw consent for future processing. For processing based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Contact hey@fahaddeartist.com to exercise your rights. You may also complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information: www.datenschutz-berlin.de.
11. Automated decisions and updates
I do not use data received through this website for automated decisions producing legal or similarly significant effects, or associated profiling. This notice reflects the website as of 6 October 2026 and will be updated when functionality or providers change.