Privacy Policy

1. Controller

2. Hosting and server logs

This website is delivered through Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Technically necessary log data may be processed when a page is requested, in particular the IP address, date and time, requested URL, referrer, browser, device and operating-system information. Processing is necessary to deliver the website securely, reliably and efficiently and to prevent abuse. The legal basis is Article 6(1)(f) GDPR.

Vercel may process data outside the European Economic Area. Vercel describes, among other mechanisms, the EU-US Data Privacy Framework and Standard Contractual Clauses for such transfers. Further information: Vercel Privacy Notice · Vercel DPA.

3. Privacy settings and access to your device

We store your choice regarding optional services in your browser's local storage. This is necessary for the website to respect that choice; the legal basis for subsequent processing is Article 6(1)(f) GDPR and section 25(2)(2) TDDDG for access to the device. Google Analytics and Calendly load only after your prior consent. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG.

You may change your choice at any time with effect for the future. Processing performed before withdrawal remains lawful.

4. Google Analytics 4

After you consent, we use Google Analytics 4, an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics processes page views and interactions, session information, approximate location and browser and device information. The cookies “_ga” and “_ga_<measurement-id>” may be used to distinguish users and sessions; Google states a default lifetime of up to two years.

The Google tag is not loaded by our website before you consent. Advertising storage, advertising user data and personalised advertising remain disabled. Processing is used solely for audience measurement and content improvement on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.

Processing by Google LLC in the United States cannot be ruled out. Google refers to the EU-US Data Privacy Framework and Standard Contractual Clauses. Retention of user- and event-level data follows the retention period configured for the Analytics property. Further information: Google Privacy Policy · Google Analytics data collection.

5. Scheduling with Calendly

We use Calendly, a service provided by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA, for scheduling. The Calendly embed and its resources load only after you choose scheduling and consent to the “External scheduling” category. Loading may transmit technical usage data to Calendly and may store or access information on your device.

When you book, Calendly processes the information you provide, in particular your name, email address, appointment details and optional information. Access through the optional embed is based on Article 6(1)(a) GDPR and section 25(1) TDDDG; processing of your booking is necessary for pre-contractual steps under Article 6(1)(b) GDPR. Calendly describes the EU-US Data Privacy Framework and Standard Contractual Clauses as transfer mechanisms. Calendly Privacy Notice.

6. AI website check

The technical AI website check initially processes the URL you enter and publicly available technical information from the target website. The request is performed server-side. The target website may log the technical request from our hosting system; your local IP address is not transmitted to the website being checked.

If you unlock the complete findings, we additionally process your name, email address, checked URL, scan results and technical metadata used to prevent abuse. This provides and contextualises the requested check and enables potential pre-contractual communication. The legal bases are Article 6(1)(b) GDPR and, for security and abuse prevention, Article 6(1)(f) GDPR. The information is not automatically used for newsletters or marketing sequences.

7. Contact enquiries and email delivery

When you submit an enquiry, we process the contact information you enter, your request, the selected service and technical security information such as a non-reversible hash of the requesting IP address and the user agent. Required fields are necessary to process the request. Processing is necessary to respond and take pre-contractual steps under Article 6(1)(b) GDPR and to prevent abuse under Article 6(1)(f) GDPR.

We use Resend, provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, to deliver enquiries by email. Sender details and message content are processed in the United States. Resend describes Standard Contractual Clauses and participation in the EU-US Data Privacy Framework as transfer mechanisms. These forms do not automatically subscribe you to a newsletter. Resend Privacy Policy · Resend DPA.

8. Recipients and transfers

Personal data is disclosed only to the hosting, analytics, scheduling and email providers necessary for the functions described above and to public authorities where required by law. Transfers to third countries take place only on the basis of an adequacy decision or appropriate safeguards under Articles 44 et seq. GDPR where required.

9. Retention

We retain personal data only for as long as necessary for the relevant purpose. Enquiries are deleted after the communication has ended unless statutory retention duties apply or the data is required to establish, exercise or defend legal claims. Your privacy choice remains in your browser until you delete or withdraw it or we change the settings version. Provider data is also subject to their documented deletion and retention rules and our account settings.

10. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with effect for the future. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. To exercise your rights, contact us at the email address above.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our location is:

12. Security and changes

We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. We update this policy when our processing, providers or the legal framework materially changes. The date above identifies the latest substantive update.