Owner and Data Controller

Akmal Hakim – Kuala Lumpur, Malaysia

Any question regarding privacy policy: privacy@akmalhakim.com

Introduction

My website address is: https://www.akmalhakim.com. This Policy describes the information I collect from you, how I use that information and my legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to me.

Comments

When visitors leave comments on the site I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on my site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who I share your data with

Since no public will be allowed to login to the administration page of my sites, your data will not be shared with anyone or companies.

How long I retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on my website (if any), I also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have have left comments, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. You can also request that I erase any personal data I hold about you. This does not include any data I are obliged to keep for administrative, legal, or security purposes.

Where I send your data

Visitor comments may be checked through an automated spam detection service.

Detailed information on the processing of Personal Data

I use a select number of trusted external service providers for certain technical data processing and/or service offerings. These service providers are carefully selected and meet high data protection and security standards. Verily, I only share information with them that is required for the services offered and I contractually bind them to keep any information I share with them as confidential and to process Personal Data only according to my instructions. For your reference, I use the following subprocessors to process the data collected by my websites:


Service	Explanation	Personal Data Collected
Matomo	To collect and analyze information about how you interact with my websites (web analytics), and to recognize and stop any misuse. Matomo is an analytics software used by my blog to analyze data directly without the help of third parties. I installed Matomo on my server directly, meaning only me controls this data.	Personal Data processed: Tracker; Usage Data.
Displaying content from external platforms	This type of service allows you to view content hosted on external platforms directly from the pages of my blog and interact with them. This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it. Google Fonts is a typeface visualization service provided by Google LLC that allows my blog to incorporate content of this kind on its pages. Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows my blog to incorporate content of this kind on its pages.	Google Fonts (Google LLC) Data processed: Tracker; Usage Data. Place of processing: United States – Privacy Policy. Font Awesome (Fonticons, Inc. ) Data processed: Tracker; Usage Data. Place of processing: United States – Privacy Policy.
Traffic optimization and distribution	This type of service allows my blog to distribute their content using servers located across different countries and to optimize their performance. Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their function is to filter communications between my blog and the User’s browser. Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents that may contain Personal Information of the User are transferred. Cloudflare (Cloudflare Inc.) Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all the traffic through my blog, i.e., communication between my blog and the User’s browser, while also allowing analytical data from my blog to be collected.	Data processed: Various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
Hosting Provider	I use a Malaysian company as hosting provider for my websites. I am subjected to their privacy policy and so do you.	Data processed: All types of data Place of processing: AIMS Data Center Kuala Lumpur
hCaptcha	hCaptcha is used to check whether the data entered on my website (such as comment section or contact form) has been entered by a human or by an automated program. Data processing is based on Art. 6(1)(f) of the GDPR (DSGVO): the website or mobile app operator has a legitimate interest in protecting its site from abusive automated crawling and spam. For more information about hCaptcha and IMI’s privacy policy and terms of use, please visit the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.	For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be forwarded to IMI.

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of my blog (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal Data is subject to European data protection law;

provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
processing is necessary for compliance with a legal obligation to which the Owner is subject; related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner; necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide my Service, comply with my legal obligations, respond to enforcement requests, protect my rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Displaying content from external platforms, Analytics and Traffic optimization and distribution.

Opt-out choice

CLICK HERE TO REVIEW & UPDATE YOUR CONSENT

Definitions & Legal References

Additional information about Data collection and processing

Legal action

The User’s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of my blog or the related Services.
The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

Additional information about User’s Personal Data

In addition to the information contained in this privacy policy, my blog may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, my blog and any third-party services may collect files that record interaction with my blog (System logs) use other Personal Data (such as the IP Address) for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

How “Do Not Track” requests are handled

My blog does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within my blog and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through my blog (or third-party services employed in my blog, which can include: the IP addresses or domain names of the computers utilized by the Users who use my blog, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.

User

The individual using my blog who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Data Supervisor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of my blog. The Data Controller, unless otherwise specified, is the Owner of my blog.

My blog

The means by which the Personal Data of the User is collected and processed.

Service

The service provided by my blog as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User’s browser.

Tracker

Tracker indicates any technology – e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that enables the tracking of Users, for example by accessing or storing information on the User’s device.

Legal information

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to my blog, if not stated otherwise within this document.