Privacy policy

Last updated: 25 October 2026

This policy explains the processing of personal data when you visit websiteswedo.de or contact us.

1. Controller

For privacy enquiries, please contact us by email:

2. Hosting and technical delivery by Cloudflare

This website is hosted and delivered directly through Cloudflare Pages on Cloudflare's infrastructure. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare supports website delivery and protection against abusive requests.

Requests involve processing technical access data, including your IP address, request date and time, requested page or file, browser and device information and, where available, the referring page. These data are used to deliver content, identify errors and maintain website security and availability. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable website.

Processing outside the EU: Cloudflare may process personal data outside the EU or EEA, including in the USA. Cloudflare identifies its EU-US Data Privacy Framework certification as a mechanism for transfers to the USA and standard contractual clauses for other relevant transfers or as a fallback mechanism. See the Cloudflare privacy policy for recipients, safeguards and data subject rights. Cloudflare also publishes a Data Processing Addendum. Cloudflare's privacy contact is dpo@cloudflare.com.

Retention: Technical access data are processed according to the relevant purpose for delivery, security, troubleshooting or compliance with legal duties. We do not have a confirmed single deletion period covering all services involved. Further information about provider-specific retention and applicable transfer safeguards can be requested through the providers' privacy contacts.

3. Language and device storage

On your first visit, the browser language is evaluated locally. German opens the German version; other languages open the English version. This does not use GPS or an external location service.

Choosing DE or EN saves your preference as “websiteswedo-language” in your browser's Local Storage until you change it or delete the site data. The preference is not separately submitted to us, although the requested language page forms part of the technical request. Storage provides the language feature you requested under section 25(2)(2) TDDDG; to the extent personal data are involved, Article 6(1)(f) GDPR supports this user-friendly functionality.

“Accept” closes the privacy notice and stores “websiteswedo-privacy-notice” in the current tab's Session Storage so it stays closed for that browsing session. It ends with that session or can be removed by deleting the site data. The footer's “Privacy notice” link reopens it. This button does not give blanket consent to advertising, tracking or other processing.

4. Project brief

The project brief is processed locally in your browser into a text file. “Download project brief” makes that file available on your device without sending the contents to us or storing them on our behalf. We receive them only if you choose to email the brief. You control retention of the downloaded file.

5. Email enquiries

When you email us, we process your email address, message and any other details you provide to handle your enquiry. Our mailbox is hosted by IONOS, which processes the data needed for email transmission and storage. See the IONOS privacy information.

Article 6(1)(b) GDPR applies to enquiries concerning a potential or existing contract. Other enquiries are handled under Article 6(1)(f), based on our legitimate interest in responding. We delete correspondence when the enquiry is resolved and retention is no longer needed for contract performance, legal duties or the establishment, exercise or defence of claims. Statutory retention is based on Article 6(1)(c).

6. No advertising or analytics trackers embedded by us

Our page code does not embed Google Analytics, advertising pixels, external fonts, maps or video services. The text and planet effects run locally. Google Search Console is used to review search visibility without adding an analytics script to this website. Hosting providers' technical security processing is separate.

7. Your rights

Subject to legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). Contact hello@websiteswedo.de to exercise these rights. Where processing relies on consent, it can be withdrawn prospectively at any time.

Right to object: Where processing relies on Article 6(1)(f), you may object under Article 21 for reasons relating to your particular situation. Objections to direct marketing do not require such reasons; this website does not embed direct-marketing tracking.

You may complain to a supervisory authority under Article 77, particularly where you live, work or believe an infringement occurred. The authority in Schleswig-Holstein is the Independent Centre for Data Protection Schleswig-Holstein.

8. Required data and automated decisions

Technical transmission data are needed to deliver the page. Contacting us or completing a project brief is voluntary; we may be unable to reply without contact details. We do not use automated decisions with legal or similarly significant effects, or corresponding profiling, on this website.