The short version: this site has no accounts, no comments, no forms and no advertising. It does use Google Analytics to understand which pages are useful, which sets cookies and sends some technical data to Google. Your web host also records standard server logs. If you email me, I have your email. That is the whole picture, and this page explains it.
This website is published by Kanaan Al Aboud as a personal project. There is no company behind it. For the purposes of the EU General Data Protection Regulation, the data controller is:
Kanaan Al Aboud
Post code 500169
hello@visittosyria.com
Because the publisher is established in the European Union, the GDPR applies to this site regardless of where you are reading it from.
Very little, and none of it deliberately. Specifically, this site has:
What is processed: the technical information in server logs, the measurement data collected by Google Analytics, and anything you choose to send me by email. Each is described below.
Like effectively every website, the hosting provider records standard technical information when a page is requested. This typically includes your IP address, the date and time, the page requested, your browser and operating system type, and the page you arrived from.
These logs exist for security, abuse prevention, and diagnosing technical faults. They are generated and held by the hosting provider rather than assembled by me into any profile, and they are not used to identify individual readers or combined with anything else.
If you write to hello@, corrections@, or partner@visittosyria.com, I receive your email address, your name if you give it, and whatever you write. I use it to reply to you and, where relevant, to correct the site.
Correspondence is kept while it is useful and then deleted. I do not add email addresses to any list, and I do not share them with anyone.
Please do not send sensitive personal information by email, including identity documents, financial details, or information about anyone else's circumstances in Syria. Email is not a secure channel and I am not equipped to handle sensitive data.
This site sets strictly necessary technical cookies from the website platform and its caching layer, and analytics cookies from Google Analytics where you have consented. It sets no advertising cookies.
The Cookie policy lists them in detail and explains how to refuse or remove them.
This site uses Google Analytics 4 to understand which pages people find useful and where they arrive from. It is used for that purpose only. I do not use it to build advertising audiences, and no advertising features are enabled.
Google Analytics sets cookies and processes technical data including your IP address, the pages you view, approximate location derived from the IP address, your device and browser type, and how you reached the site. Google Analytics 4 does not log or store full IP addresses. Data may be processed by Google outside the European Union under its own safeguards.
I also use Google Search Console, which reports how the site appears in search results. It works from Google's own crawl data rather than from a script on this site, and it does not track individual visitors.
To opt out, decline analytics cookies in the consent banner, use Google's browser opt-out add-on, or block cookies for this site in your browser. Declining does not affect anything you can read here.
Operating a website necessarily involves service providers who process technical data on my behalf:
No personal data is sold, rented, or shared for marketing purposes. There is nothing to sell, and I would not.
Where the GDPR applies, the bases relied on are:
Under the GDPR you have the right to request access to personal data held about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive your data in a portable form. You also have the right to lodge a complaint with a supervisory authority.
In practice, because this site holds almost no personal data, most requests can be answered quickly. Write to hello@visittosyria.com and I will respond within one month as the regulation requires.
If you are in the European Union, you may complain to your national data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
This site is a general reference and is not directed at children. It does not knowingly collect personal data from anyone, including children. If you believe a child's data has somehow been sent to me, write and I will delete it.
This page carries a version number and a date. Material changes, particularly the introduction of analytics, advertising, or a mailing list, will be reflected here at the time they happen rather than afterwards.
Privacy questions and data requests: hello@visittosyria.com. Corrections to this page, like corrections to anything else here, are welcome.