Privacy policy

Last updated: October 28, 2026

This is a translation. The German version is the authoritative one.

1. Controller

The controller for data processing on this website under the General Data Protection Regulation (GDPR) is:

More details are in the legal notice (Impressum).

2. Scope

This policy applies to the website i3oma.de, in particular the home page, the portfolio pages (/de/, /ar/), the project page /nfhm/ and the app pages under /apps/.

Our apps also have their own privacy policies describing the processing in each app: Baynana, Salfa, Rasdah, MopTally, Naqsha.

3. Hosting and server log files

The website runs on a server provided by DigitalOcean, LLC (USA). When you open a page, the server automatically processes technical data sent by your browser, in particular your IP address, the date and time of access, the page requested, the previously visited page (referrer) and browser and operating-system information (user agent). This data may be stored in server log files.

The purpose is to deliver the website, keep it stable and secure, and analyse errors. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and working website). Log files are kept only as long as needed for these purposes and then deleted.

DigitalOcean processes the data as our processor. Because DigitalOcean is based in the USA, a transfer to the USA cannot be ruled out; it takes place on the basis of DigitalOcean's Data Processing Agreement, including the EU Standard Contractual Clauses.

4. Cookies

We do not use cookies for analytics or advertising. On pages with forms, a technically necessary security cookie (csrftoken) may be set to prevent forged form requests. This is strictly necessary for the service you use (Section 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act; Art. 6(1)(f) GDPR). You can delete cookies in your browser at any time.

5. Contact forms

If you write to us through a contact form on this website (for example on the home page or the apps' contact and support pages), we store your name, email address, message and the time in our database in order to handle your request and reply to you.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or steps prior to a contract (for example a project enquiry), and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your request has been fully handled, unless statutory retention duties apply.

6. Contact by email

If you email us, we process your email address, your message and any details you provide in order to reply (Art. 6(1)(b) or (f) GDPR). Our mailbox is hosted by Google (Gmail); Google processes messages under its privacy policy, including outside the EU. Google is certified under the EU-US Data Privacy Framework.

7. Fonts, icons and scripts

All fonts, icons and code libraries on this website are loaded from our own server. No data is sent to external providers such as Google Fonts or content delivery networks when you open the pages.

8. Embedded content and external links

The project page /nfhm/ opens a PDF preview via Google Docs only when you click; only then is data (in particular your IP address) sent to Google. Links to WhatsApp, Instagram, LinkedIn, the App Store or Google Play are plain links; data is sent only when you open the link. The operators of the destination sites are responsible for processing there.

9. Recipients and retention

We do not sell your data and share it only with the service providers named in this policy or where the law requires it. Unless a specific period is given above, we keep personal data only as long as needed for the purpose concerned or required by statutory retention duties.

10. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on consent, you can withdraw it at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation.

An email to kh249918@gmail.com is enough for any request. You also have the right to lodge a complaint with a data protection supervisory authority, for example where you live or with the authority responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen (lfd.niedersachsen.de).

11. Obligation to provide data

You are not obliged to provide us with data. Without a name and email address, however, we cannot answer a contact request. No automated decision-making, including profiling, takes place.

12. Changes

We update this policy when the website or the law changes. The version published here applies.