1. Information collected
When you submit the contact form, the following information is collected:
- Your name and email address
- Company or brand name
- Project type, budget, and preferred timeline
- Your website or Instagram account
- The project information included in your message
The hosting and security infrastructure may also process limited technical information, such as your IP address,
browser type, request time, and security signals, to deliver and protect the website.
2. How the information is used
Your information is used only to:
- Review and respond to your inquiry
- Discuss a potential project or professional relationship
- Prepare proposals, estimates, or related communications
- Protect the form and website from abuse, spam, and security threats
- Meet applicable legal obligations and establish or defend legal claims
Your form data is not sold or used for automated decision-making. When the Meta Pixel is enabled, limited visit
and conversion data may be used to measure advertising performance and improve campaign relevance.
3. Legal basis
Inquiry data is processed to take steps at your request before entering into a contract and, where applicable, to
perform a contract. Website security and limited business correspondence are processed on the basis of legitimate
interests in operating a secure website and responding to professional inquiries. Data may also be processed where
necessary to comply with a legal obligation.
4. Service providers and recipients
The website is hosted using Cloudflare Pages and Cloudflare Workers. Form submissions are processed through
Cloudflare Email Service and delivered to a Gmail inbox operated by Google. Website analytics are provided by Google
Analytics, loaded through Google Tag Manager (Google Ireland Limited / Google LLC). When advertising measurement is
enabled, Meta Platforms may also process browser, device, page-view, referral, and conversion-event information.
Personal data is not sold. It may be disclosed where required by law or where necessary to protect legal rights.
5. International data transfers
Cloudflare and Google operate internationally. Personal data may therefore be processed outside the European
Economic Area. Where required, transfers are handled using recognised safeguards such as adequacy decisions or
standard contractual clauses.
6. Data retention
General inquiries are normally retained for up to 12 months after the last communication and then deleted when no
longer needed. If an inquiry leads to a project or contract, relevant correspondence and business records may be
retained for longer where required for contractual, accounting, tax, or legal purposes.
7. Cookies, analytics, and Meta Pixel
This website stores your light or dark theme preference, your cookie choice, and limited form-progress information
in your browser’s local or session storage. Cloudflare may use strictly necessary security technologies to protect
the website and its forms. These are needed for the site to work and do not require consent.
With your consent, Google Analytics sets cookies to measure how the website is used: pages visited, approximate
location, device and browser type, the source of the visit, and steps completed in the inquiry forms. No names,
email addresses, or links you enter in the forms are sent to Google Analytics. Google signals is enabled, so for
visitors who are signed in to a Google account and have allowed ad personalisation, Google may add aggregated,
anonymous information about age range, gender, and interests to these reports. You can control this in your
Google ad settings ↗. Visitors from Europe are asked for
consent first; until they accept, Google Analytics runs without cookies and only receives anonymous, aggregated
signals. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25 TDDDG).
The audit landing page may use the Meta Pixel when a Pixel ID is configured, also only with your consent. It records
events such as page views, completion of the first audit-request step, and successful audit requests. Meta may use
cookies or similar technologies and may connect those events with information it already holds, subject to Meta’s
own privacy terms. Campaign parameters such as UTM values and the Meta click identifier (fbclid) may be saved with a
form inquiry to understand which advertisement produced the request.
You can change or withdraw your choice at any time in cookie settings.
8. Your rights
Subject to applicable law, you may request access to, correction of, deletion of, or restriction of your personal
data. You may also object to certain processing and request data portability where applicable.
To exercise these rights, email badretdinovswork@gmail.com. You also have the
right to lodge a complaint with a competent supervisory authority, including the
Baden-Württemberg data protection authority ↗.
9. Security
Reasonable technical and organisational measures are used to protect personal data. However, no internet
transmission or storage system can be guaranteed to be completely secure.
10. Changes to this policy
This policy may be updated when the website, form, service providers, or legal requirements change. The latest
revision date is shown at the top of this page.