Privacy Policy

Who I Am

This website is operated by Ashkan Rezaee, an architect and technologist based in Copenhagen, Denmark.

For privacy-related questions or data deletion requests, please use the GDPR request form below (or use the contact information available on the About page).

What Data I Collect

I collect the following personal data:

• Email address — when you subscribe to my newsletter
• Subscription timestamp — the date and time when you subscribed
• Unique subscriber ID — a randomly generated identifier used for secure unsubscribe links

I do not collect any other personal information through the newsletter subscription process.

Purpose

I use your email address exclusively to send you my personal newsletter, which includes:

• Updates on new blog posts and articles
• Announcements about new projects and experiments
• Behind-the-scenes insights and thoughts

I do not use your email address for:

• Advertising or marketing third-party products or services
• Sharing or selling your data to third parties
• Any purpose other than sending the newsletter

Legal Basis (GDPR)

The legal basis for processing your personal data is consent (Article 6(1)(a) of the GDPR).

By subscribing to the newsletter, you provide explicit consent to receive email communications from me. You can withdraw this consent at any time by unsubscribing using the link provided in every newsletter email, or by visiting the unsubscribe page.

Where Data Is Stored / Data Processors

Your email address and subscription data are stored in Vercel's database, which processes your data on my behalf.

Vercel is a data processor that:

• Is GDPR compliant and provides a Data Processing Agreement (DPA)
• Stores data in secure, encrypted databases
• Does not use subscriber data for their own purposes

Note: Currently, I store subscriber data directly in Vercel's database. If I integrate with an email service provider (such as MailerLite, Mailchimp, ConvertKit, or Buttondown) in the future, I will update this section to reflect that provider and ensure they offer a DPA for GDPR compliance.

How Long I Keep Data

I keep your email address and subscription data until you:

• Unsubscribe from the newsletter (using the unsubscribe link or the unsubscribe page)
• Request deletion of your data by contacting me directly

Once you unsubscribe or request deletion, your data will be permanently removed from my systems within 30 days.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data I hold about you
• Right to rectification — You can request correction of inaccurate or incomplete data
• Right to erasure — You can request deletion of your personal data
• Right to withdraw consent — You can unsubscribe from the newsletter at any time
• Right to data portability — You can request your data in a structured, machine-readable format
• Right to lodge a complaint — You can file a complaint with a supervisory authority (e.g., the Danish Data Protection Agency if you are in Denmark)

To exercise any of these rights, please use the GDPR request form in the "How to Contact Me" section below.