In short: this website sets no cookies, shows no ads and doesn’t track you across other websites. I only process personal data when you write to me, send an inquiry or request the website check report.
Controller
The controller responsible for processing your data on this website is:
KG WebMedia, Kaan Güler
Ziegelstraße 14, 40468 Düsseldorf, Germany
Phone: +49 1523 7382112
Email: mail@kg-webmedia.de
As a sole proprietor, I am not required to appoint a data protection officer. If you have questions about data protection, please write to me directly.
Hosting and server logs
The website is hosted by Vercel Inc., USA. The server functions run in Frankfurt am Main; finished pages and images are delivered by Vercel via a worldwide network of servers, usually from a location near you.
With every request, Vercel processes technically necessary data: your IP address, date and time, the requested address, the previously visited page, browser and operating system. This serves the secure and fast delivery of the website and the defense against attacks. The legal basis is my legitimate interest under Art. 6 (1) (f) GDPR. Vercel only stores these logs for a short time.
A data processing agreement is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).
Inquiry form
When you use the inquiry form, I process your details: requested services, industry, timeline, budget, name, email address and, if provided, phone number, current website and message. The details reach me by email and are not stored on the website’s server.
I only use them to answer your inquiry and prepare a proposal. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract). An invisible field and a minimum time to fill in the form protect against spam; no data is sent to other providers for this.
I delete the inquiry once it has been dealt with and no contract results. If a contract is concluded, the statutory retention periods under commercial and tax law apply.
Sending emails
For inquiries, website check reports and my replies, I use the email mailbox at my hosting provider SiteGround. The messages are stored there until I delete them. A data processing agreement is in place with SiteGround.
Contact by email, phone and WhatsApp
If you send me an email or call me, I process your details to deal with your request (Art. 6 (1) (b) or (f) GDPR).
The “WhatsApp” button opens a chat with me in WhatsApp. Only then is data transferred to WhatsApp (Meta); WhatsApp’s privacy policy applies, and data may be transferred to the USA. If you don’t want this, you can reach me just as well by phone or email.
Website check
When you enter an address in the website check, I send it to Google PageSpeed Insights (Google Ireland Limited) to measure loading time, findability and accessibility. In addition, the website’s server retrieves the homepage and the robots.txt file of the checked website. The server stores the result for up to six hours so that a repeated check of the same address is faster and the report matches the result.
To prevent misuse, the server keeps your IP address in memory for at most one hour and uses it to limit the number of checks.
If you request the detailed report, I process your name and email address to send you the report (Art. 6 (1) (b) GDPR). I receive a notification with your name, email address, the checked website, the result and whether you agreed that I may contact you. I will only get in touch if you have expressly agreed to this (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time by email. Without further contact, I delete the details after twelve months at the latest.
Audience measurement with Plausible Analytics
To see which pages are read and where visitors come from, I use Plausible Analytics by Plausible Insights OÜ, Estonia. Plausible sets no cookies and stores no IP addresses. A daily changing key is used to create a number from the IP address and browser identifier, which allows visits on the same day to be counted; it can’t be used to identify you or to recognize you across several days or websites. Among other things, the visited page, the previously visited website, country, device type and browser are recorded.
The script and the measurement data pass through this website’s address to Plausible; Vercel forwards your IP address for creating the number. The data is stored on servers in Germany. The legal basis is my legitimate interest in a privacy-friendly analysis of the website (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Plausible.
Google reviews
The website’s server retrieves the reviews from my Google Business Profile from Google once a day and shows them as text. Your browser doesn’t connect to Google for this, and none of your data is transferred to Google.
Fonts, maps and links
The fonts are hosted on this website’s server; there is no connection to Google Fonts or other font providers. Maps, videos or posts from other providers are not embedded. Links to Google Maps, WhatsApp, LinkedIn, Xing or client websites only transfer data to the respective provider when you click them.
Storage in the browser
The website sets no cookies. In your browser’s storage, it only remembers your choice between light and dark and that you have closed the note about cookies. These entries never leave your device. The legal basis is Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Details can be found in the cookie policy.
Encryption
The connection to this website is encrypted with TLS. You can recognize this by the padlock symbol and “https://” in the address bar.
Your rights
You have the right to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7 (3)).
Right to object: if I process data on the basis of my legitimate interest, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
An email to mail@kg-webmedia.de is sufficient. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for me, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
There is no automated decision-making or profiling.
Changes
I update this privacy policy when the website or the legal situation changes. The version with the date shown at the top of this page applies.