Privacy policy

Last updated: 20 October 2026

This policy explains the processing of personal data when you visit websiteswedo.de or contact us.

1. Controller

Email: hello@websiteswedo.de

2. Website access and hosting

The website is provided through OpenAI Sites and uses Cloudflare infrastructure for delivery and security. Requests transmit technical data such as your IP address, request time and page, browser and device information, and, where available, the referring page. These data support delivery, troubleshooting and protection against abuse.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in secure, reliable website operation. Recipients include the hosting and security providers involved, notably OpenAI and Cloudflare. OpenAI identifies OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, for EEA users. Cloudflare, Inc. is located at 101 Townsend Street, San Francisco, CA 94107, USA.

Processing outside the EU, including in the USA, is possible. Cloudflare describes the EU-US Data Privacy Framework and, where applicable, standard contractual clauses as transfer mechanisms. OpenAI describes adequacy decisions and standard contractual clauses. Details about safeguards, recipients and retention are available in the OpenAI privacy policy and Cloudflare privacy policy. Further details or copies of applicable safeguards can be requested through their listed privacy contacts.

Technical data are processed as long as needed for delivery, security, troubleshooting or legal obligations. Provider retention depends on the particular service and purpose; no single fixed period is asserted for all technical data.

3. Language and device storage

On your first visit, the browser language is evaluated locally. German opens the German version; other languages open the English version. This does not use GPS or an external location service.

Choosing DE or EN saves your preference as “websiteswedo-language” in your browser's Local Storage until you change it or delete the site data. The preference is not separately submitted to us, although the requested language page forms part of the technical request. Storage provides the language feature you requested under section 25(2)(2) TDDDG; to the extent personal data are involved, Article 6(1)(f) GDPR supports this user-friendly functionality.

“Accept” closes the privacy notice and stores “websiteswedo-privacy-notice” in the current tab's Session Storage so it stays closed for that browsing session. It ends with that session or can be removed by deleting the site data. The footer's “Privacy notice” link reopens it. This button does not give blanket consent to advertising, tracking or other processing.

4. Project brief

The project brief is processed locally in your browser into a text file. “Download project brief” makes that file available on your device without sending the contents to us or storing them on our behalf. We receive them only if you choose to email the brief. You control retention of the downloaded file.

5. Email enquiries

When you email us, we process your email address, message and any other details you provide to handle your enquiry. Our mailbox is hosted by IONOS, which processes the data needed for email transmission and storage. See the IONOS privacy information.

Article 6(1)(b) GDPR applies to enquiries concerning a potential or existing contract. Other enquiries are handled under Article 6(1)(f), based on our legitimate interest in responding. We delete correspondence when the enquiry is resolved and retention is no longer needed for contract performance, legal duties or the establishment, exercise or defence of claims. Statutory retention is based on Article 6(1)(c).

6. No advertising or analytics trackers embedded by us

Our page code does not embed Google Analytics, advertising pixels, external fonts, maps or video services. The text and planet effects run locally. Google Search Console is used to review search visibility without adding an analytics script to this website. Hosting providers' technical security processing is separate.

7. Your rights

Subject to legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). Contact hello@websiteswedo.de to exercise these rights. Where processing relies on consent, it can be withdrawn prospectively at any time.

Right to object: Where processing relies on Article 6(1)(f), you may object under Article 21 for reasons relating to your particular situation. Objections to direct marketing do not require such reasons; this website does not embed direct-marketing tracking.

You may complain to a supervisory authority under Article 77, particularly where you live, work or believe an infringement occurred. The authority in Schleswig-Holstein is the Independent Centre for Data Protection Schleswig-Holstein.

8. Required data and automated decisions

Technical transmission data are needed to deliver the page. Contacting us or completing a project brief is voluntary; we may be unable to reply without contact details. We do not use automated decisions with legal or similarly significant effects, or corresponding profiling, on this website.