LAST UPDATED: 17 OCTOBER 2026
Privacy notice
This notice explains how the portfolio handles information submitted through its contact form.
Who handles your information
The site is operated by Agim Demhasaj as an individual. For privacy questions or requests, contact info@agimdemhasaj.com.
Information you choose to send
The contact form asks for your name, email address and message so Agim can read and reply to your inquiry. Please do not include passwords, financial details, health information or other sensitive personal information. The site does not ask for it.
On submission, the form sends those three fields to a private Neon database and attempts an email notification through Resend. An empty hidden anti-spam field is also submitted; if it is filled in, the request is rejected and discarded. The email address is used to limit repeated submissions from the same address. There is no account, newsletter, advertising profile or payment checkout.
Retention and deletion
Contact messages in the Neon database are scheduled for deletion 30 days after submission. A daily automated cleanup removes expired rows; an expired message may remain until the next cleanup run. Email notifications may remain in Agim's email account, email-provider systems or backups under their own retention and deletion settings; deleting the database row does not remove those copies.
To ask for access to or deletion of a message before scheduled deletion, email info@agimdemhasaj.com and include the email address you used. Please do not send identity documents unless separately requested and necessary. Requests will be handled subject to applicable law.
Service providers and transfers
- Vercel: website hosting and serverless API execution.
- Neon: private PostgreSQL storage for the contact message and its submission time.
- Resend: delivery of the message notification to Agim.
These providers may process data in more than one country, and hosting or security logs may include request metadata such as an IP address or browser information. The contact-message table does not store an IP address. Each provider's own privacy terms and retention settings also apply to data it processes.
Cookies, analytics and external content
The site does not intentionally set cookies, run analytics or advertising pixels, embed third-party content, or save the language choice in browser storage. Self-hosted page assets are used. Vercel, Neon and Resend still process information as needed to host the site, store a submitted message and deliver its notification. Provider-generated security or operational logs are subject to their own settings.
Legal basis and your rights
The operator is based in Kosovo. Kosovo's Law No. 06/L-082 on Personal Data Protection is relevant to this site. Other data-protection rules may apply depending on the operator's establishment, audience, provider locations and actual activity.
Depending on the law that applies, you may have rights to request access, correction, deletion, restriction or objection, or to complain to a competent supervisory authority. Contact Agim first at info@agimdemhasaj.com. In Kosovo, the Agency for Information and Privacy is the relevant public authority. EU/EEA visitors may also be able to contact their local data-protection authority where the GDPR applies.
Changes and language
The portfolio is available in English, Albanian and German, but this legal notice is currently in English only.
Official sources: Kosovo Official Gazette — Law No. 06/L-082 · EU GDPR, Regulation (EU) 2016/679.