Privacy Policy

Last updated: February 13, 2026

This Privacy Policy explains how personal data is processed when you use amir2000.com. The website is operated from the Netherlands.

1. Data Controller

Controller: Amir Darzi

Website: https://www.amir2000.com/

Contact: contact form

2. Data We Process

• Website and security logs: IP address, browser/device information, requested URL, date/time, and referrer.
• Contact form data: name, email, subject, message, and delivery metadata needed to send and process your message.
• Spam-protection data: reCAPTCHA token and verification result (including score/action) on contact.php.
• Cookie preference data: consent choice stored by the cookie banner so your preference can be remembered.

3. Why We Process Data (GDPR Legal Bases)

• Operate and secure the website (legitimate interests).
• Respond to contact requests (steps prior to contract and/or legitimate interests).
• Prevent spam and abuse (legitimate interests).
• Store consent preferences (consent and legitimate interests).
• Meet legal obligations where applicable.

4. Cookies and Similar Technologies

The site uses a cookie-consent banner and may store a consent-status cookie to remember your choice.

• Functional cookie: remembers consent preferences.
• No advertising trackers by default: this site does not load ad pixels or behavioral advertising scripts as a default behavior.
• Third-party script on contact form: Google reCAPTCHA is loaded on contact.php for spam protection.

You can review or change your consent choice via the Cookie settings link in the footer. You can also delete cookies in your browser.

5. Third Parties and Recipients

Data may be processed by service providers needed to run the website:

• Google reCAPTCHA v3: spam prevention on the contact form.
• Hosting and mail infrastructure providers: website hosting, logging, and email routing.

Data is shared only when necessary to provide these services.

6. International Transfers

Some service providers may process data outside the European Economic Area. Where this applies, processing is based on legally valid transfer mechanisms provided by those services.

7. Retention

• Server/security logs: typically up to 30 days, unless a longer period is required for security or legal reasons.
• Contact messages: typically up to 12 months after handling the request.
• Consent preference cookie: retained according to browser settings and cookie lifetime.

8. Security

Reasonable technical and organizational measures are used to protect data, including access controls and secure configuration practices. No internet transmission or storage method is fully risk-free.

9. Your Rights

Under GDPR, you may have rights to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent for consent-based processing.

To exercise your rights, use the contact form.

10. Complaints

If you believe your data protection rights were not handled correctly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Children

This website is not directed at children under 16, and no intentional collection of children's personal data is performed.

12. Policy Changes

This policy may be updated from time to time. Material updates will be reflected by changing the "Last updated" date on this page.

13. Third-Party Terms for reCAPTCHA

The contact form uses Google reCAPTCHA. Use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.