Privacy notice

Last updated: 6 November 2026. This notice explains how personal data is handled on this personal portfolio website under the EU General Data Protection Regulation (GDPR) and Finnish data protection law.

Controller and contact

The controller is Abdulla Heal Masud, an individual based in Helsinki, Finland. For any question about personal data, or to exercise your rights, contact [email protected]. A data protection officer has not been appointed.

What data is processed, why, and on what basis

• Email correspondence. If you email me, I process your email address, your name if provided, the message and any attachments, to reply and manage the conversation. Basis: legitimate interest in communicating with people who contact me (GDPR Art. 6(1)(f)), or steps taken at your request before a contract (Art. 6(1)(b)) where the enquiry concerns one. Messages can be sent by email or through the contact form on this site.
• Contact form. If you use the form, the name, email address and message you type are sent to Formspark, a form-processing service, which forwards them to my email. Nothing is sent until you press “Send message”. Basis and use are the same as for email correspondence above.
• Technical data when you visit. Your browser sends data such as your IP address, browser type and the pages requested to the hosting infrastructure so the site can be delivered and kept secure. Basis: legitimate interest in running a secure website (Art. 6(1)(f)).
• Cookie choice. Your cookie decision is stored in your browser to respect it on later visits. It stays on your device, is not sent to me, and is strictly necessary for the notice to work.
• Appearance preferences (optional). Your chosen colour theme is stored in your browser only if you allow it in the cookie notice. Basis: your consent (Art. 6(1)(a)) and the Finnish Act on Electronic Communications Services. This data stays on your device.

The portfolio pages do not use advertising or analytics tools, and I do not use profiling or automated decision-making or sell personal data. The blog at masud.fi/blog is run on WordPress, uses analytics tools and has its own cookie banner; see the blog’s cookie policy and its privacy information for how data is handled there.

Email provider, form provider and retention

Contact email is handled through NameCrane, and contact-form submissions pass through Formspark; both act as processors for me. Formspark may keep a copy of submissions in its dashboard according to its own settings and terms. Messages are normally kept for 1 year and then deleted. Longer retention may be necessary where a legal obligation or an unresolved dispute requires it.

The provider’s processing locations and any safeguards for transfers outside the European Economic Area depend on its service terms. Contact me if you want information about the arrangements relevant to your correspondence.

Hosting

The website is served by a third-party hosting provider, which receives technical request data (such as IP address) when you load a page. Its log retention and processing locations are set by that provider’s own terms and privacy information, and are not specified here. Fonts and images are served from the site itself, so your browser does not contact third-party font providers.

Recipients and external links

Personal data is shared only with the service providers above (email, form and hosting), or with authorities where the law requires it. LinkedIn is linked, not embedded; following the link takes you to a service with its own privacy information. Sending email also involves your own email provider.

Your rights

Depending on the circumstances you have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, and object to processing based on legitimate interests. Where processing relies on consent you can withdraw it at any time through cookie settings, without affecting earlier lawful processing.

Contact [email protected]. Requests are normally answered within one month, subject to the extensions and exceptions the GDPR permits. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

Cookies

See the cookie policy for what is stored in your browser and how to change your choice.

Changes

This notice will be updated if the website’s tools or the handling of correspondence changes; the date above shows the latest version.