Privacy information.
How personal data is processed on this website.
1. Data controller
Harris Khan
Darulfazl – Engineering & Product Development
Kelterstr. 6
74199 Untergruppenbach
Germany
Email: info@darulfazl.com
2. Website operation and hosting
When you access this website, technical connection data may be processed, including your IP address, access date and time, requested page, browser and device details, referrer and response status. This is necessary to provide and secure the website, investigate errors and defend against attacks.
The legal basis is Article 6(1)(f) GDPR (our legitimate interest in providing a secure and reliable website). Server logs are removed according to the hosting provider’s technical and contractual deletion rules when no longer needed for these purposes. We verify the actual log retention settings in our hosting account.
We use hosting services provided by Hostinger. The provider may process data on our behalf under Article 28 GDPR. Please refer to Hostinger's privacy information and its data processing addendum. Depending on the subscribed plan, server region and subprocessors, personal data may be transferred outside the EEA, subject to legally applicable safeguards such as standard contractual clauses where required.
3. Contact form and email inquiries
If you use the contact form, we process your name, email address, optional company or organisation, selected project category and message. Direct email inquiries include the details and communication data you provide. The form forwards your submission to info@darulfazl.com and does not additionally store inquiries in a website database.
The legal basis is Article 6(1)(b) GDPR for inquiries concerning a contract or pre-contractual steps, and Article 6(1)(f) GDPR for other business inquiries (our legitimate interest in responding). The necessary contact details and message must be provided to enable us to respond. We delete communications when no longer needed for the stated purposes unless statutory retention requirements or legitimate documentation interests apply.
Our hosting and email service providers may technically process message content as part of email delivery and mailbox services.
4. Essential sessions and cookies
Simply browsing the website does not cause our website code to set advertising or analytics cookies. When you submit the contact form, an essential session cookie (df_contact_attempts) may be set to limit repeated submissions. The password-protected administration area also uses a session cookie to manage login and security. These sessions are limited to the relevant use and are not employed for behavioral profiling.
The legal basis for technical session security is Article 6(1)(f) GDPR and, where applicable, Section 25(2)(2) TDDDG. No advertising or analytics cookie banner is required for the features currently implemented. If tracking, third-party embeds or other consent-requiring technology is introduced, this notice and any required consent mechanism will be updated.
5. Recipients and retention
Your data is accessed by us and, where technically necessary, by hosting and email providers acting as processors or independent controllers. We keep personal data only as long as necessary for the purposes set out above or to comply with statutory obligations. Legal retention requirements for business records remain unaffected.
6. Your rights
Subject to applicable conditions under the GDPR, you have the right to access (Article 15), rectify (Article 16), erase (Article 17), restrict processing (Article 18) and obtain data portability (Article 20). Where data is processed on legitimate-interest grounds, you may object on grounds relating to your particular situation under Article 21. Any consent you have given can be withdrawn for the future.
To exercise your rights, write to info@darulfazl.com. You may also lodge a complaint with a data protection supervisory authority, particularly the Baden-Württemberg Data Protection Authority, responsible for our registered business location.
7. Automated decisions and updates
We do not use information submitted through this website for automated decision-making or profiling within the meaning of Article 22 GDPR. This notice will be updated if the services used or actual processing activities change.
Last updated: October 2026