1. Controller
Özcan Bozkurt
Email: kontakt@bozkurtconsult.com
Phone: +43 664 545 6191
2. Hosting and server logs
This website is hosted by Hostinger. When pages are requested, technically necessary data such as the IP address, time, requested resource, browser and device information may be processed in server logs to provide the website securely and reliably.
3. Contact by email or phone
When you contact me by email or phone, the information you provide is processed to respond to your enquiry and, where applicable, to take steps before entering into an agreement.
4. Server-side enquiry form
The form processes your name, email address, optional phone number, country of residence, preferred appointment format, topic, preferred time, short message, form language and privacy confirmation. The information is transmitted over HTTPS, validated on the Hostinger server and used to process your enquiry and pre-contractual contact.
The internal message is delivered through authenticated Hostinger SMTP to a Microsoft email mailbox used by Özcan Bozkurt. You then receive an automatic acknowledgement through the same SMTP service. No website database is used for enquiries. Email correspondence is handled according to the purpose of the contact and any applicable legal obligations; no blanket retention period is stated here.
5. Automatic acknowledgement and thought library
The acknowledgement contains a thought selected at random from a local, pre-approved library. There is no AI analysis, profiling or selection based on your information, and no external quote API. Only the IDs of the last ten entries are retained to reduce immediate repetition, without being linked to your enquiry.
6. Security, session cookie and short-term data
The form uses a technically necessary secure session cookie with SameSite=Lax and HttpOnly for CSRF and abuse protection. Short-lived rate-limit records contain only pseudonymised hashes of IP and email addresses and timestamps; they never contain the enquiry text or phone number and expire within 60 minutes. Minimal application logs may contain the time, a pseudonymous request ID, success or a technical error class and, where applicable, the selected thought ID. They contain no enquiry text, full email address, phone number or full IP address and are removed within 14 days.
7. Data minimisation
Please do not send diagnoses, medical reports or detailed health information through this form. A small amount of information is sufficient for initial organisational clarification.
8. External content
The website does not embed maps, social-media plugins, external fonts or an external CAPTCHA service. External links are ordinary links. Google Analytics is loaded only after your voluntary consent.
9. Google Analytics 4
With your consent, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for statistical audience measurement. The legal basis is Article 6(1)(a) GDPR. Your decision is stored only as a necessary local browser preference and can be changed or withdrawn at any time for the future through “Privacy settings”.
We use Basic Consent Mode v2. Before consent, the Google Analytics tag is not loaded, no analytics requests or cookieless measurement signals are sent to Google and no analytics cookies are set. After consent, technical usage data such as the page viewed, page title, time, referrer, campaign parameters and general browser, device and approximate location information may be processed. Form content such as names, email addresses, phone numbers, messages or counselling concerns is not sent as analytics parameters.
Google Ads is not linked. Personalised advertising, Google Signals, User IDs and enhanced measurement are not used. Email addresses and 18 specified sensitive URL query parameters are redacted in the data stream before transmission. User and event data retention is set to two months. Data may also be processed outside the European Economic Area. Further information is available in Google's privacy policy.
10. Your rights
You may have rights of access, rectification, erasure, restriction, objection and data portability under applicable data-protection law.
11. Automated decisions
The website does not make automated decisions and does not carry out profiling.
12. Version
August 2026