Privacy policy

At a glance

Without your consent, we only process what the website needs to run: technical access data at our host, two essential cookies and a cookieless count of page views. We only load Google Analytics, Microsoft Clarity and the Meta Pixel once you agree in the cookie window. You can change your choice at any time via "Cookie settings" at the bottom of every page.

Hosting

This website is hosted by Render (provider details below); the server is located in Frankfurt am Main. When you visit it, Render processes the data required for this, in particular your IP address, on our behalf and according to our instructions; we have a data processing agreement with Render under Art. 28 GDPR. Render is a US company and uses its own service providers, for example to protect against attacks, so data may also be transferred to the US. Render is certified under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR); the European Commission's standard contractual clauses apply in addition. The legal basis is our legitimate interest in delivering the website securely and quickly (Art. 6 (1) (f) GDPR).

Hosting provider: Render Services, Inc., 525 Brannan Street, Suite 300, San Francisco, CA 94107, United States

Server log files

When you visit this website, information transmitted by your browser is recorded automatically: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources and is used solely for technical operation, security and error analysis. The legal basis is Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required for the purpose for which it was collected.

Cloudflare Web Analytics

We use Cloudflare Web Analytics to count how often each page is viewed. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, your browser loads a small script from Cloudflare that sends the page viewed, the referring page, browser and device type and loading times; in the process, Cloudflare sees your IP address. The service sets no cookies, stores nothing on your device and does not recognise you on later visits. We only see aggregated numbers, never individuals. We have a data processing agreement with Cloudflare under Art. 28 GDPR; Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is our legitimate interest in measuring reach without storing anything on your device (Art. 6 (1) (f) GDPR).

Contacting us

The contact form sends us your name, email address and message and, if you wish, your title, company, phone number, topics and the address of your website. The details are transmitted over an encrypted connection to our server at Render in Frankfurt and delivered to us from there as an email; they are not stored on the website itself. Our emails are processed by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as our processor (Art. 28 GDPR); the same applies if you email us directly. We use your details to answer your enquiry and to clarify any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering it (Art. 6 (1) (f) GDPR). We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

AI visibility check

For the free AI visibility check, you send us your website address and email address, or, without a website, your business name and location. As with the contact form, the details are transmitted over an encrypted connection to our server at Render in Frankfurt and delivered to us from there as an email; the form is likewise protected by Cloudflare Turnstile (see below). For the report, we open your public website, look up your business on Google, Google Maps, Bing and in directories, and ask ChatGPT (OpenAI), without logging in, the questions your customers would ask. We do not pass on your email address or other contact details in the process. The legal basis is Art. 6 (1) (b) GDPR, because you have requested the report. If you have also ticked the box allowing us to write to you after the report, this is based on your consent (Art. 6 (1) (a) GDPR), which you can withdraw by email at any time. We delete your contact details once the report has been sent and your request is complete, or, if you consented, when you withdraw consent, unless statutory retention obligations apply. We keep the measurement results about your business (questions, answers, businesses named) without your contact details so that we can compare them with later measurements.

Protecting the form (Cloudflare Turnstile)

To protect the contact form against automated submissions, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile only loads once you start using the form; visitors who don't use the form send no data to Cloudflare. To check whether the submission comes from a person, technical data such as your IP address and information about your browser and device is sent to Cloudflare. Turnstile does not set cookies or store anything in your browser. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is our legitimate interest in protecting the form against misuse (Art. 6 (1) (f) GDPR); the check is technically necessary for the submission you requested (Section 25 (2) no. 2 TDDDG).

Cookies and consent

Two cookies are essential for running the website and are always active: one stores your chosen language, the other your choice in the cookie window. They do not require consent (Section 25 (2) no. 2 TDDDG). Every other service that stores or reads information on your device is only loaded with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR): Google Analytics and Microsoft Clarity under "Analytics", and the Meta Pixel under "Marketing". You can change or withdraw your consent at any time, with effect for the future, via "Cookie settings" at the bottom of every page. The name, purpose and duration of each cookie are listed in our cookie policy.

Google Tag Manager

Once you consent, we load Google Analytics, Microsoft Clarity and the Meta Pixel through Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself sets no cookies and does not analyse data, but loading it sends your IP address to Google. It is not loaded without your consent. The legal basis is your consent (Art. 6 (1) (a) GDPR). For transfers to the US, see the Google Analytics section.

Google Analytics

If you consent under "Analytics", we use Google Analytics 4 to understand which pages are visited and how enquiries come about. The provider is Google Ireland Limited (address above). The data processed includes the pages viewed, time spent, where the visit came from, approximate location, device and browser; for this, Google sets cookies containing a random identifier. According to Google, Google Analytics 4 does not store IP addresses. Google signals and data sharing with Google are switched off, and event data is deleted after 14 months. Data may be transferred to Google LLC in the US, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Microsoft Clarity

If you consent under "Analytics", we use Microsoft Clarity to see how our pages are used: where people click, how far they scroll and where they drop off. For this, Clarity records clicks, mouse movements and scrolling and turns them into heatmaps and session recordings. Clarity does not record what you type into form fields, and we have also excluded the contact form from recording entirely. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity sets two cookies containing a random identifier and stores one entry in your browser's session storage; the data transmitted includes the pages viewed, your interactions, device and browser details, and your IP address, from which Microsoft derives your approximate location. We have switched off data sharing with Microsoft Advertising. Recordings are deleted after 30 days; individual recordings that we mark as favourites or that Microsoft selects as a sample are kept for up to 9 months. Data may be transferred to Microsoft Corporation in the US, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Meta Pixel

If you consent under "Marketing", we use the Meta Pixel to measure whether our ads on Facebook and Instagram lead to visits to this website. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel sets a cookie and stores entries in your browser's local storage; data such as the page viewed, your IP address and browser details is sent to Meta. If you are logged in to Facebook or Instagram, Meta can link the visit to your account. When it loads, the pixel also fetches a helper script from Meta via the jsDelivr service; this sends your IP address to jsDelivr. We are jointly responsible with Meta for collecting the data and transmitting it to Meta (Art. 26 GDPR); this is governed by Meta's Controller Addendum (facebook.com/legal/controller_addendum). Meta alone is responsible for any further processing. You can exercise your rights against us and against Meta. Data may be transferred to Meta Platforms, Inc. in the US, which is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Fonts

This website uses the Inter typeface. It is served locally from our own server; no connection to servers operated by Google or other third parties is established when the page loads. Your IP address is not transmitted to anyone in the process.

Links to social networks

Our links to Instagram, Facebook, YouTube and LinkedIn are plain hyperlinks. Visiting this website sends no data to these networks; that only happens if you click a link and open the network's page. We do not embed videos, maps or other content from third-party servers.

SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://”.

Your rights

You have the right at any time to obtain information about the personal data we hold about you, its origin and recipients, and the purpose of processing (Art. 15 GDPR). You also have the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). Where we base processing on our legitimate interest, you can object to it on grounds relating to your particular situation (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future; for cookies, use "Cookie settings" at the bottom of every page. For anything else, please contact us at the address above.

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.

Changes to this privacy policy

We update this privacy policy whenever changes to this website or to the law require it. The version published here always applies. Last updated: 9 October 2026.