1. Introduction
With the following information, we would like to provide you, as a „affected person,“ an overview of the processing of your personal data by us and your rights under data protection laws. Accessing our internet pages is generally possible without providing personal data. However, if you wish to use specific services of our company via our website, processing of personal data may become necessary. If processing of personal data is required and no legal basis exists for such processing, we will generally obtain your explicit consent.
The processing of personal data, such as your name, address, or email address, always takes place in accordance with the General Data Protection Regulation (DS-GVO) and GDPR. Through this data protection declaration, we would like to inform you about the scope and purpose of the personal data collected, used, and processed by us.
We have implemented numerous technical and organizational measures as the data controller to ensure the most comprehensive possible protection of personal data processed through this website. Nevertheless, internet-based data transmissions may inherently have security vulnerabilities, making an absolute level of protection unattainable. For this reason, you are free to submit personal data to us via alternative means, for example by phone or by mail.
2. Responsible Party
The responsible party under the GDPR is:
Markus Buchheit
Lale Sokak 2/13 (Agaoglu My Office)
34752 Istanbul
Turkey
3. Data Protection Officer
Data protection officer under the definition of GDPR / DS-GVO is Michael Buchheit. To contact the point of contact regarding data protection, please reach out via: info@mb-seo.de
4. Definition of terms
The privacy policy is based on the terminology used by the European directive and regulation issuer when issuing the General Data Protection Regulation (DS-GVO). Our privacy policy aims to be both easily readable and understandable for the public, as well as for our customers and business partners. To ensure this, we would like to first explain the terms used.
We use the following terms in this privacy statement:
4.1 Personal data
Personal data are all informations relating to an identified or identifiable natural person. A natural person is considered identifiable if she or he can be identified directly or indirectly, in particular by means of assignment to a identifier such as a name, a reference number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
4.2 Affected Person
The affected person is any identified or identifiable natural person whose personal data is processed by the data controller (our company).
4.3 Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
4.4 Limitation of processing
Limitation of processing involves marking stored personal data with the aim of restricting their future processing.
4.5 Profiling
Profiling is any form of automated processing of personal data that involves using such personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyze or predict aspects relating to work performance, financial status, health, personal preferences, interests, reliability, behavior, location, or relocation of that natural person.
4.6 Pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that such additional information is separately stored and subject to technical and organizational measures ensuring that the personal data are not assigned to an identified or identifiable natural person.
4.7 Processing Contractors
A data processor is a natural or legal person, authority, institution, or other entity that processes personal data on behalf of the controller.
4.8 Recipient
The recipient is a natural or legal person, authority, institution, or other entity to whom personal data is disclosed, regardless of whether it is a third party or not. Authorities that may receive personal data as part of a specific investigative mandate under Union law or national law do not qualify as recipients.
4.9 Third Party
A third party is a natural or legal person, authority, institution, or other body other than the data subject, the controller, the processor, and persons entrusted with direct responsibility by the controller or the processor to process personal data.
4.10 Consent
Consent means any freely given declaration of willingness by the data subject, provided in an informed manner and unambiguously, either by a statement or by any other unambiguous affirmative action, indicating that the data subject agrees to the processing of personal data concerning them.
5. Legal basis for processing
Article 6, paragraph 1, letter a of the GDPR serves our company as the legal basis for processing activities where we obtain consent for a specific purpose of processing.
If the processing of personal data is necessary to fulfill a contract to which you are a party, as for example in processing activities required for the delivery of goods or for the provision of another performance or consideration, the processing is based on Article 6, paragraph 1, letter b, of the GDPR. The same applies to such processing activities required for the execution of pre-contractual measures, such as in cases of inquiries regarding our products or services.
If our company is subject to a legal obligation requiring the processing of personal data, such as for fulfilling tax obligations, the processing is based on Article 6, Paragraph 1, letter c of the GDPR.
In rare cases, the processing of personal data may be required to protect the legitimate interests of the affected person or another natural person. This would be the case, for example, if a visitor were to be injured in our establishment and their name, age, health insurance data, or other vital information had to be provided to a doctor, hospital, or other third parties. In such a case, the processing would be based on Article 6(1)(d) of the GDPR.
Ultimately, processing activities could be based on Article 6(1)(f) of the GDPR. Processing activities that fall outside of any of the aforementioned legal bases are based on this legal foundation when processing is necessary to fulfill a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and fundamental freedoms of the data subject do not override such interests. Such processing activities are permitted by us, in particular, because they have been specifically mentioned by the European legislator. He held the view that a legitimate interest might exist if you are a customer of our company (Consideration 47, paragraph 2 of the GDPR).
6. Transmission of data to third parties
A transmission of your personal data to third parties for any purpose other than those listed below does not take place.
We only share your personal data with third parties if:
- you have given your express consent under Article 6(1), sentence 1, point (a) of the GDPR,
- the transfer pursuant to Art. 6 Para. 1 Sentence 1 letter f of the GDPR for the protection of our legitimate interests is permissible and no reason exists to assume that you have a substantially legitimate interest in not having your data transmitted,
- in the case that a legal obligation exists for the transfer pursuant to Article 6 Paragraph 1 Sentence 1 letter c of the GDPR, as well as
- this is legally permissible and required under Art. 6 Abs. 1 S. 1 lit. b of the GDPR for the processing of contract relationships with you.
7. Technology
7.1 SSL/TLS Encryption
This page uses for Warranty for the security of data processing and to protect the transmission of confidential content, such as orders, login data, or contact requests, which you send to us as operator, an SSL- or TLS-based encryption. A secured connection can be recognized by the presence of „https://“ instead of „http://“ in the browser address bar and by the padlock symbol in your browser’s address bar.
We use this technology to protect your submitted data.
7.2 Data collection during visit to the internet site
When using our website solely for informational purposes—i.e., when you do not register or otherwise transmit us any information—we collect only those data that your browser sends to our server (so-called „server log files“). Our website records, with each visit to a page by you or an automated system, a range of general data and information. These general data and information are stored in the server’s log files. The following data may be collected:
- used browser types and versions,
- the operating system used by the accessing system,
- the website from which a requesting system accesses our website (so-called Referrer),
- the subpages, which are accessed via a linking system on our website,
- the date and time of a visit to the website,
- a shortened internet protocol address (anonymized IP address),
- the Internet service provider of the accessing system.
By using this general data and information, we draw no conclusions about your personal identity. Rather, this information is required to
- to correctly deliver the content of our website
- to optimize the content of our website as well as the advertising for these,
- ensuring the long-term functionality of our IT systems and the technology of our website
- to provide law enforcement authorities with the information required for criminal investigation in the case of a cyberattack.
These collected data and information are therefore processed by us on one hand statistically and on the other hand with the aim of enhancing data protection and data security within our company, ultimately ensuring an optimal protection level for the personal data we process. The anonymous data from server log files are stored separately from all personal data provided by an affected individual.
The legal basis for data processing is Article 6, paragraph 1, sentence 1, letter f of the GDPR. Our legitimate interest stems from the aforementioned purposes for data collection.
7.3. IP Address storage and assignment
Since we are unable to provide our services in certain countries due to corporate policy, we record the IP addresses of our visitors when they visit our website. This also occurs in connection with the submission of inquiries via a contact form or by email. The storage of IP addresses and the matching with inquiries from individuals serves our legitimate interest in only entering into contracts in countries where we also provide our services, and is therefore based on Article 6, paragraph 1, f) of the GDPR; furthermore, where certain services are prohibited in some countries, the storage is also based on Article 6, paragraph 1, c) of the GDPR. The deletion of IP data takes place no later than within the legal retention periods, although typically it occurs 1 month after the visitor’s visit to our website.
8. cookies
8.1 General information about cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our page.
The cookie stores information that arises specifically in connection with the particular end device used. This, however, does not mean that we thereby obtain direct knowledge of your identity.
The use of cookies serves to make the use of our offering more pleasant for you. Thus, we employ so-called session cookies to detect that you have already visited individual pages of our website. These are automatically deleted upon leaving our site.
In addition, we also use temporary cookies for the purpose of optimizing user-friendliness, which are stored on your end device for a specific, predefined period. Upon your next visit to our site to utilize our services, the system automatically detects that you have already been with us and recalls the inputs and settings you previously made, so you do not have to enter them again.
On the other hand, we use cookies to statistically track the use of our website and evaluate our offerings for you with the purpose of optimization. These cookies allow us to automatically recognize upon a subsequent visit to our site that you have already been there before. These cookies are automatically deleted after a defined period of time.
8.2 Legal basis for the use of cookies
The data processed by cookies that are necessary for the website to function properly are therefore required to safeguard our legitimate interests and those of third parties under Article 6(1), sentence 1, point (f) of the GDPR.
For all other cookies, it applies that you have given your consent to them via our opt-in cookie banner in accordance with Article 6, Paragraph 1, letter a of the GDPR.
9. Contents of our website
9.1 Data processing for order processing
The personal data we collect is passed on to the transport company responsible for delivery for the purpose of order fulfillment, if necessary for the delivery of goods. Your payment details are disclosed to the designated financial institution for the purpose of payment processing, if required for payment processing. If payment service providers are used, we will inform you of this explicitly below. The legal basis for the transfer of data is Article 6, paragraph 1, letter b, of the GDPR.
9.2 Contact initiation / Contact form
In the course of contacting us (e.g. via contact form or email), personal data is collected. The specific data collected in the case of a contact form is visible from the respective contact form. These data are stored and used exclusively for the purpose of addressing your inquiry or for the contact process and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Art. 6 Abs. 1 lit. f of the GDPR. If your contact is intended to conclude a contract, an additional legal basis for processing is provided by Art. 6 Abs. 1 lit. b of the GDPR. Your data will be deleted after completion of your inquiry, provided that the circumstances indicate the matter has been finally resolved, and unless statutory retention obligations apply.
9.3 Services / Digital Goods
We transmit personal data to third parties only if necessary within the context of contract execution, for example to the credit institution entrusted with payment processing.
A more extensive transmission of the data does not take place or occurs only if you have explicitly consented to it. The transmission of your data to third parties without your explicit consent, for example for advertising purposes, does not take place.
The basis for data processing is Article 6, Paragraph 1, letter b of the GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.
10. Our activities in social networks
So that we can communicate with you on social media platforms and inform you about our services, we maintain our own pages there. When you visit one of our social media pages, we share responsibility together with the operator of the respective social media platform for the data processing activities involving personal data, in accordance with Article 26 of the GDPR.
We are not the original provider of these pages, but rather use them within the scope of the opportunities offered by the respective providers.
Therefore, we kindly draw your attention to the possibility that your data may be processed outside the European Union and/or the European Economic Area. This could pose data protection risks for you, as your rights—such as the right to information, erasure, objection, etc.—may be difficult to enforce, and processing in social networks often occurs directly for advertising purposes or for analyzing user behavior by the providers, without our ability to influence this. If the provider creates user profiles, cookies are typically used, or user behavior is directly linked to your own social network member profile (if you are currently logged in).
The described data processing activities involving personal data take place pursuant to Article 6, paragraph 1, letter f of the GDPR, based on our legitimate interests and the legitimate interests of the respective provider, in order to communicate with you in a timely manner or to inform you about our services. If you need to provide consent as a user to data processing by the respective providers, the legal basis applies to Article 6, paragraph 1, letter a of the GDPR in conjunction with Article 7 of the GDPR.
Since we do not have access to the data holdings of the providers, we advise you to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. Additional information regarding the processing of your data in social networks and the possibility of exercising your objection or withdrawal rights (so-called Opt-Out) are provided below for the respective social network providers we use:
10.1 Facebook
(Shared) Controller for data processing in Europe:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy (Data Guidelines):
https://www.facebook.com/about/privacy
Opt-Out and advertising preferences:
https://www.facebook.com/ads/preferences/?entryproduct=adsettings_screen
Facebook has joined the EU-U.S. Privacy Shield agreement:
https://www.privacyshield.gov/ps/participant?id=a2zt0000000GnywAAC&status=Active
https://de-de.facebook.com/about/privacy
10.2 Instagram
(Shared) Controller for data processing in Germany:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy (Data Guidelines):
http://instagram.com/legal/privacy/
Opt-Out and advertising preferences:
https://www.instagram.com/accounts/privacyandsecurity
Facebook has joined the EU-U.S. Privacy Shield agreement:
https://www.privacyshield.gov/ps/participant?id=a2zt0000000GnywAAC&status=Active
10.3 LinkedIn
(Shared) Controller for data processing in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy Policy:
https://www.linkedin.com/legal/privacy-policy
Opt-Out and advertising preferences:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn has joined the EU-U.S. Privacy Shield agreement:
https://www.privacyshield.gov/ps/participant?id=a2zt0000000L0UZAA0&status=Active
10.4 X
(Shared) Controller for data processing in Europe:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy Policy:
Information on your data:
https://x.com/settings/yourtwitterdata
Opt-Out and advertising preferences:
Twitter has joined the EU-U.S. Privacy Shield agreement:
https://www.privacyshield.gov/ps/participant?id=a2zt0000000TORzAAO&status=Active
10.5 YouTube
(Shared) Controller for data processing in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy:
https://policies.google.com/privacy
Opt-Out and advertising preferences:
https://adssettings.google.com/authenticated
Google has joined the EU-U.S. Privacy Shield agreement:
https://www.privacyshield.gov/ps/participant?id=a2zt000000001L5AAI&status=Active
11. Web analysis
11.1 Facebook Pixel (Custom Audience)
This website uses the „Facebook Pixel“ of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA („Facebook“). In the case of explicit consent being granted, user behavior can be tracked thereafter, following that users have viewed or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and may help optimize future advertising campaigns.
The collected data is anonymous to us, thus providing no insights into the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile to be established, and Facebook may use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy.https://www.facebook.com/about/privacy/(You may use this. You can enable Facebook and its partners to display advertisements both on and off Facebook. Furthermore, a cookie may be stored on your device for these purposes. These processing activities occur exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.)
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
Facebook Inc., headquartered in the USA, is certified for the US-European Privacy Shield, which ensures compliance with data protection standards applicable in the EU.
To disable the use of cookies on your IT system, you can configure your internet browser so that no cookies are stored on your IT system in the future or existing cookies are deleted. However, turning off all cookies may result in certain functions on our internet pages no longer being available. You can also disable the use of cookies by third parties such as Facebook at the following website of the Digital Advertising Alliance: https://optout.aboutads.info/?c=2&lang=EN
In addition, you can disable cookies for tracking and advertising purposes via the following websites:
We inform you that this setting will also be deleted when you delete your cookies.
11.2 Google Analytics
On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://about.google/ (Gordon House, Barrow Street, Dublin 4, Ireland; herein „Google“). In this context, pseudonymized usage profiles are created and cookies (see point „Cookies“) are used. The information generated by the cookie regarding your use of this website such as
- Browser type/version,
- used operating system,
- Referrer-URL (the previously visited page),
- Hostname of the accessing computer (IP address),
- Server request time,
will be transmitted to a Google server in the USA and stored there. The information is used to evaluate website usage, to compile reports on website activities, and to provide additional services related to website and internet usage for market research and needs-based design of these internet pages. These data may also be transferred to third parties if required by law or if third parties process the data on behalf of Google. Your IP address will never be combined with any other data from Google. The IP addresses will be anonymized so that assignment is not possible (IP-Masking).
You can prevent the installation of cookies by adjusting the settings of your browser software; however, we would like to point out that in such a case, certain functions of this website may not be fully available.
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
Instead of the browser extension, particularly on mobile devices, you can also prevent data collection by Google Analytics by clicking on the following link: Disable Google Analytics. An opt-out cookie will be set, which prevents the collection of your data upon visiting this website in the future. The opt-out cookie is valid only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
11.3 Google Tag Manager
For our website, we use the Google Tag Manager from the company Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. This Tag Manager is one of many helpful marketing products offered by Google. Through the Google Tag Manager, we can centrally integrate and manage code snippets from various tracking tools that we use on our website.
In this privacy statement, we want to explain in detail what the Google Tag Manager does, why we use it, and in what form data is processed.
The Google Tag Manager is an organizational tool that allows us to centrally integrate and manage website tags through a user interface. Tags refer to small code snippets that, for example, record your activities on our website (track). For this purpose, JavaScript code snippets are inserted into the source text of our page. These tags often originate from Google’s internal products such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. Such tags perform various functions. They can collect browser data, feed marketing tools with data, embed buttons, set cookies, and also track users across multiple websites.
Why do we use the Google Tag Manager for our website?
As they so beautifully say: Organization is half the rent! And of course this also applies to the maintenance of our website. To design our website as well as possible for you and all individuals interested in our products and services, we need various tracking tools, such as Google Analytics. The data collected from these tools show us what interests you most, where we can improve our services, and which individuals we should still showcase our offerings to. And for this tracking to function properly, we must integrate corresponding JavaScript codes into our website. Fundamentally, we could embed each individual code segment from the various tracking tools separately into our source code. However, this would require a significant amount of time and makes it easy to lose track of what’s going on. That’s why we use the Google Tag Manager. We can simply integrate the required scripts and manage them all from one central location. Additionally, the Google Tag Manager offers an easy-to-use user interface and requires no programming knowledge. This way, we maintain order in our tag jungle.
Which data is stored by the Google Tag Manager?
The Tag Manager itself is a domain that does not set cookies and does not store data. It functions as a simple „manager“ for the implemented tags. The data collects the individual tags from different web analytics tools. The data is essentially passed through to the individual tracking tools via Google Tag Manager and is not stored.
However, things are quite different when it comes to the embedded tags of various web analytics tools, such as Google Analytics. Depending on the analytics tool, various data about your web behavior are typically collected, stored, and processed using cookies. For this, please read our privacy statements for each individual analytics and tracking tool that we use on our website.
In the Tag Manager account settings, we have allowed Google to receive anonymized data from us. However, this involves only the use and operation of our Tag Manager and not your data, which is stored through the code snippets. We permit Google and others to receive selected data in anonymized form. We therefore agree to the anonymous sharing of our website data. We were unable to determine exactly which aggregated and anonymized data is transmitted, despite extensive research. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymized website data and creates user trends as part of benchmarking initiatives. During benchmarking, our own results are compared against those of competitors. Based on the collected information, processes can be optimized.
How long and where will the data be stored?
When Google stores data, such data is stored on Google’s own servers. The servers are distributed around the world. Most of them are located in America. Under https://datacenters.google/ Can you exactly check where the Google servers are located.
How long the individual tracking tools store your data can be found in our individual data protection texts for each tool.
How can I delete my data or prevent data storage?
The Google Tag Manager itself does not set cookies but manages tags from various tracking websites. In our privacy statements for each individual tracking tool, you will find detailed information on how you can delete or manage your data.
Please note that when using this tool, your data may also be stored and processed outside the EU. Most third countries (including the USA) are currently considered insecure under European data protection law. Therefore, data may not be simply transferred, stored, and processed in insecure third countries unless appropriate guarantees (such as EU standard contractual clauses) exist between us and the non-European service provider.
Legal basis
The use of the Google Tag Manager requires your consent, which we have obtained through our Cookie Popup. This consent is according to Art. 6 Abs. 1 lit. a DSGVO (Consent) the legal basis for the processing of personal data, as it may occur during collection via web analytics tools.
In addition to consent, on our side there is a legitimate interest in analyzing the behavior of website visitors in order to technically and economically improve our offering. With the help of the Google Tag Manager, we can improve our profitability. The legal basis for this is Art. 6 Abs. 1 lit. f DSGVO (Legitimate Interests)We use the Google Tag Manager only to the extent that you have given your consent.
Google processes your data, including in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information on this can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Additionally, Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard contractual clauses (Standard Contractual Clauses – SCC) are templates provided by the European Commission and are intended to ensure that your data complies with European data protection standards even when it is transferred and stored in third countries (such as the United States). Through the EU-US Data Privacy Framework and the standard contractual clauses, Google commits to upholding European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the United States. These clauses are based on a Commission implementing decision. You can find the decision and the corresponding standard contractual clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms (Google Ads Data Processing Terms), which refer to the standard contract clauses, are available at https://business.safety.google/intl/de/adsprocessorterms/.
If you’d like to learn more about the Google Tag Manager, we recommend visiting the FAQs under https://support.google.com/tagmanager/?hl=de#topic=3441530.
Which data Google collects by default and how it uses this data, you can find at https://policies.google.com/privacy?hl=de read further.
12. Advertising
12.1 Google Ads with Conversion Tracking
We have integrated Google Ads on this website. Google Ads is a service for online advertising that allows advertisers to run ads in Google’s search results and within the Google Display Network. Google Ads enables advertisers to predefine specific keywords, so that an ad appears in Google’s search results only when a user performs a keyword-relevant search. Within the Google Display Network, ads are distributed via an automated algorithm while adhering to the previously defined keywords and thematic relevance.
The service operator for Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on third-party websites and in Google’s search engine results, as well as by displaying third-party advertising on our website.
If you arrive at our website via a Google ad, Google will store a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used for your identification. Using the conversion cookie—provided it has not yet expired—it can be determined whether specific subpages, for example, the shopping cart of an online shop system, were accessed on our website. Through the conversion cookie, both we and Google can determine whether a user who arrived at our website via an AdWords ad generated a sale, i.e., completed or abandoned a product purchase.
The data and information collected through the use of the conversion cookie are used by Google to generate visit statistics for our website. These visit statistics are then utilized by us to determine the total number of users who were referred to us via Google Ads advertisements, thereby enabling us to assess the success or failure of individual ad campaigns and to optimize our ads for the future. Neither our company nor any other Google Ads customers receive information from Google that could be used to identify you.
Through the Conversion Cookie, personal information such as the internet pages you visit are stored. Each time you visit our internet pages, personal data—including the IP address of the internet connection you are using—is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personally collected data with third parties under certain circumstances.
You can prevent the setting of cookies by our website at any time by adjusting the settings of the internet browser you are using, thereby permanently objecting to the setting of cookies. Such a browser setting would also prevent Google from setting a conversion cookie on your IT system. Additionally, a cookie previously set by Google Ads can be deleted at any time via the internet browser or other software programs.
Furthermore, you have the option of objecting to interest-based advertising served by Google. To do this, you must access the link www.google.de/settings/ads from your currently used internet browser and adjust the settings as desired.
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
Further information and Google’s current privacy policies can be found at https://www.google.de/intl/de/policies/privacy/ can be accessed.
13. Plugins and other services
13.1 Google reCAPTCHA
On this website, we also use the reCAPTCHA function provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). This function primarily serves to distinguish whether an input is made by a natural person or maliciously by machine and automated processing. The service also includes the transmission of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to be delivered to Google.
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
Google Ireland Limited, headquartered in Ireland, is certified for the US-Europe Privacy Shield, which ensures compliance with data protection standards applicable in the EU.
Further information about Google reCAPTCHA as well as Google’s data protection declaration can be viewed at: https://www.google.com/intl/de/policies/privacy/
13.2 Google Web Fonts
Our website uses so-called web fonts for a consistent presentation of font styles, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When accessing a page, your browser downloads the required web fonts into your browser cache to correctly display text and font styles.
For this purpose, the browser you are using must establish a connection with Google’s servers. As a result, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our website.
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
Google Ireland Limited, headquartered in Ireland, is certified for the US-Europe Privacy Shield, which ensures compliance with data protection standards applicable in the EU.
For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
13.3 Proven Expert
We use Proven Expert to integrate customer reviews on our website. This allows you to rate our services on our online platform. When you submit a review, the plugin captures and stores your email address, as well as technical data such as your IP address and information about the web browser you are using, in an associated log file. Additionally, the Proven Expert plugin also stores further voluntary information you provide, if you choose to share it.
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
The current data protection regulations of Expert Systems AG can be found at https://www.provenexpert.com/de-de/datenschutzbestimmungen/ can be accessed.
13.4 YouTube (videos)
We have integrated components of YouTube on this website. YouTube is an internet video portal that allows video publishers to freely upload video clips and enables other users to also view, rate, and comment on these videos at no cost. YouTube permits the publication of all types of videos, which is why complete film and television broadcasts, as well as music videos, trailers, or videos created by users themselves, are available for access via the internet portal.
YouTube’s operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
By each visit to one of the individual pages of this website, operated by us and featuring an integrated YouTube component (YouTube video), the internet browser on your IT system is automatically instructed by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information about YouTube is available at https://www.youtube.com/yt/about/de/ can be retrieved. As part of this technical process, YouTube and Google become aware of the specific page of our website that you are visiting.
So long as the affected person is simultaneously logged into YouTube, YouTube detects via the access of a subpage containing a YouTube video which specific subpage of our website you are visiting. These details are collected by YouTube and Google and are assigned to your YouTube account.
YouTube and Google receive information from the YouTube component indicating that you have visited our website whenever you are logged into your YouTube account at the same time as you access our website; this occurs regardless of whether you click on a YouTube video or not. If you do not wish such information to be transmitted to YouTube and Google, you can prevent this transmission by logging out of your YouTube account prior to accessing our website.
These processing activities take place exclusively upon explicit consent granted in accordance with Article 6, paragraph 1, letter a of the GDPR.
The privacy policies published by YouTube, available at https://www.google.de/intl/de/policies/privacy/ Available data provides insight into the collection, processing, and use of personal data by YouTube and Google.
13.5 Contact Form 7
The Contact Form 7 plugin is a service for creating contact forms. The Contact Form plugin serves solely to securely forward submitted form data to the email address of our company. Additional storage, such as in the WordPress database, does not occur. Further information and the current data protection regulations for Contact Form are available at https://de.wordpress.org/plugins/contact-form-7/ and https://rocklobster.in/ can be retrieved. Contact Form is open-source software. Communication between browser and server takes place exclusively via HTTPS (SSL/TLS) – encryption. The use of Contact Form is based on Article 6 Paragraph 1 f) of the DS-GVO, i.e., due to a legitimate interest in a technical solution for our contact form. Where Contact Form is also used in conjunction with cookies, the use is, however, based on Article 6 Paragraph 1 a) of the DSGVO, i.e., with your consent, which we obtain within the framework of the cookie consent through the corresponding plugin.
13.6 Cookie Consent
For querying your consent to the storage of cookies, we use the „Complianz“ plugin by the provider Complianz BV, headquartered in the Netherlands. The details can be obtained here: https://complianz.io/
The query and use of the plugin are based on our legitimate interest in enabling the use of additional plugins, thus falling under Article 6(1)(f) of the GDPR. As part of the balancing exercise, based on current case law, we have concluded that the use of the plugin is reasonable, necessary, and permissible to obtain your consent for the setting of cookies. You can regulate and even block the use of plugins within your browser. You also have the option at any time to refuse your consent.
14. Your rights as a data subject
14.1 Right to Confirmation
You have the right to request from us confirmation as to whether personal data concerning you is being processed.
14.2 Right to Information DS-GVO Art. 15
You have the right to obtain free information from us at any time regarding the personal data stored about you, as well as a copy of this data, in accordance with legal requirements.
14.3 Right to rectification Article 16 GDPR
You have the right to request rectification of personal data concerning you that are inaccurate. Furthermore, you have the right to request completion of incomplete personal data, taking into account the purposes of processing.
14.4 Deletion Art. 17 DS-GVO
You have the right to request from us that the personal data concerning you be deleted immediately, if one of the legally prescribed grounds applies and to the extent that the processing or storage is not necessary.
14.5 Restriction of Processing Article 18 DS-GVO
You have the right to request the restriction of processing from us if any of the legal conditions are met.
14.6 Data portability Article 20 DS-GVO
You have the right to obtain your personal data concerning you, which we have received from you, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task which is carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, you have the right, pursuant to Art. 20(1) of the GDPR, to request that personal data be directly transmitted from one controller to another controller, where such transmission is technically feasible and provided that the rights and freedoms of other persons are not affected thereby.
14.7 Objection under Article 21 of the DS-GVO
You have the right to object at any time on grounds relating to your particular situation to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) of the GDPR, namely data processing in the public interest or data processing based on a fair balance of interests.
This also applies to profiling based on these provisions in the sense of Article 4 paragraph 4 of the GDPR.
If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the assertion, exercise, or defense of legal claims.
In individual cases, we process personal data to carry out direct marketing. You may at any time object to the processing of personal data for such marketing purposes. This also applies to profiling, if it is connected with such direct marketing. If you object to us processing personal data for direct marketing purposes, we will no longer process such personal data for these purposes.
Additionally, you have the right to object, on grounds arising from your particular situation, to the processing of personal data which we carry out for scientific or historical research purposes or statistical purposes as provided in Article 89(1) of the GDPR, unless such processing is necessary for the fulfilment of a task carried out in the public interest.
You are free to exercise your right to object, in connection with the use of services of the information society, regardless of Directive 2002/58/EC, by automated means involving the use of technical specifications.
14.8 Revocation of a data protection law consent
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
14.9 Complaint to a supervisory authority
You have the right to file a complaint with a data protection authority concerning our processing of personal data.
15. Routine-based storage, deletion, and blocking of personal data
We process and store your personal data only for the period necessary to achieve the purpose of storage or as otherwise provided by laws to which our company is subject.
If the purpose for data storage ceases or a legally prescribed retention period expires, personal data will be routinely blocked or deleted in accordance with legal requirements.
16. Duration of storage of personal data
The criterion for the duration of storage of personal data is the respective legal retention period. After the expiration of the period, the corresponding data will be routinely deleted, provided they are no longer required for fulfilling or pursuing a contract.
17. Currency and Update of the Privacy Statement
This privacy policy is currently valid and has the date: June 2025.
Due to the further development of our internet pages and offerings or as a result of changed legal or official requirements, it may become necessary to amend this privacy statement. The most current privacy statement can always be found on the website under https://mb-seo.de/datenschutzerklaerung/ requested and printed by you.
