This English version is a translation provided for convenience. In case of doubt, the German version applies.
Who is responsible?
The controller responsible for data processing on this website is:
SEOeffekt Farhadian
Hamed Farhadian
Papenreye 1
22453 Hamburg
Germany
Phone: +49 40 3556 7813
Email: hamed@hamed.de
Further details can be found in the legal notice.
What are your rights?
Using the contact details above, you can exercise the following rights at any time:
- information about your data stored by us and how it is processed,
- correction of inaccurate personal data,
- deletion of your data stored by us,
- restriction of processing, where we are not yet allowed to delete your data due to legal obligations,
- objection to the processing of your data by us, and
- data portability, where you have consented to the processing or have concluded a contract with us.
If you have given us your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with the supervisory authority responsible for you at any time. Your competent supervisory authority depends on the federal state in which you live or work or in which the alleged infringement took place. A list of the supervisory authorities (for the non-public sector) with their addresses is available from the German Federal Commissioner for Data Protection.
For what purposes do we process data?
We process your personal data only for the purposes set out in this privacy policy. Your personal data is not transferred to third parties for purposes other than those stated. We only pass on your personal data to third parties if:
- you have given your express consent,
- processing is necessary to perform a contract with you,
- processing is necessary to comply with a legal obligation,
- processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on.
Hosting and delivery via Cloudflare
This website is provided via Cloudflare: the pages are hosted on Cloudflare Workers and delivered via Cloudflare’s content delivery network (CDN). A CDN is a network of distributed servers that delivers content from the nearest location and protects the website against attacks. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
When you visit the website, Cloudflare processes technically necessary data, in particular:
- your IP address,
- the date and time of access,
- the page visited and the previously visited page (referrer),
- browser type, operating system and language setting.
This data is needed to deliver the website, ensure its stability and security, and fend off attacks. It is stored in server logs only for as long as necessary for these purposes and is not combined with other data. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely, quickly and reliably.
Cloudflare processes the data on our behalf (data processing under Art. 28 GDPR). Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition. More information is available in Cloudflare’s privacy policy.
SSL/TLS encryption
To protect the security of your data in transit, we use encryption methods that reflect the current state of the art (TLS, formerly SSL) via HTTPS.
Cookies and local storage
Cookies are small text files that a website stores on your device. This website does not set any cookies itself and does not use any tracking or marketing services. For visitor statistics we use Cloudflare Web Analytics, which also works without cookies (see the next section).
For security reasons, Cloudflare may set technically necessary cookies, for example to distinguish automated attacks from real visitors (Art. 6(1)(f) GDPR, Section 25(2) TDDDG). External services that you activate yourself with a click – the booking calendar, videos, podcasts – may set their own cookies; see the sections below.
You can restrict or disable cookies at any time in your browser settings. Please use your browser’s help function to find out how. Some features of the website, such as the spam protection in the form, may then not work.
Visitor statistics with Cloudflare Web Analytics
To understand which pages are read and where visitors come from, we use Cloudflare Web Analytics by Cloudflare, Inc. (address above). The service sets no cookies, stores nothing on your device, builds no user profiles and does not recognise you on a later visit.
When you open a page, a small script from Cloudflare loads and transmits the page visited, the previous page (referrer), browser and device type, the country (derived from the IP address) and page load times. The IP address is not stored. We only see aggregated figures, never individual visitors.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the website and understanding which content is helpful. Cloudflare processes the data on our behalf; for transfers to the USA, the information given above under hosting applies. See Cloudflare’s privacy policy for details.
Counting clicks on contact options
To see which pages lead to an enquiry, this website counts clicks on contact options: phone, email, WhatsApp, booking a call, LinkedIn, the SEO Compass, a video or submitting a form. Only the type of click, the page, the area of the page (for example header or footer) and the language are sent. No cookies are set, nothing is stored on your device, no identifier is assigned and no IP address is stored. The counting runs on Cloudflare Workers Analytics Engine, on the same infrastructure as the website; we only see aggregated numbers.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the website so that visitors find the right way to get in touch. For processing by Cloudflare, the information on hosting above applies.
Newsletter
If you sign up for my newsletter, I use your email address and – if you provide it – your first name to send you the newsletter. Sign-up uses a double opt-in process: before the first newsletter you receive an email in which you confirm your subscription; only then will I send you newsletters. We store the time of sign-up and confirmation to be able to prove your consent.
Your sign-up reaches me as an email via Cloudflare Email Service (Cloudflare, Inc., see the hosting section); nothing is stored on the website itself. Before the first newsletter goes out, I will add here which service is used to send it. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time – via the unsubscribe link in every email or a short message to hamed@hamed.de. After you unsubscribe we remove your address from the mailing list; to prove earlier consent it may be kept in restricted form for up to three years.
Contact form, questionnaires and email
When you write to us by email, using the contact form or one of our questionnaires (call request, SEO check request, pre-call questionnaire), we process the information you provide. Your name and a valid email address are required; they are used to assign and answer your enquiry. All other information – such as your message, website, phone number or details about your company – is optional or needed to prepare a call, depending on the form. We also record which page you sent the enquiry from and in which language.
The information is stored to handle your enquiry and any follow-up questions. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where your enquiry relates to a contract, Art. 6(1)(b) GDPR. Once your enquiry has been dealt with, we delete the personal data unless statutory retention obligations apply.
Delivery via Cloudflare: our server sends form submissions to our inbox as an email via Cloudflare Email Service, and you receive a short confirmation of receipt at the address you entered. The provider is Cloudflare, Inc. (see the hosting section), which processes the data on our behalf (Art. 28 GDPR) and only to deliver the message. The information is not stored on the website itself.
Spam protection with Cloudflare Turnstile
To protect our forms against spam and automated attacks, we use Cloudflare Turnstile from Cloudflare, Inc. (address above). Turnstile is only loaded once you start filling in a form – not while you are simply reading the website.
Turnstile uses technical signals to check whether a person or a program is using the form. In the process, your IP address and information about your browser and device in particular are transmitted to Cloudflare. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is preventing spam and misuse of the forms. The information on transfers to the USA given for Cloudflare above applies. More information is available in Cloudflare’s Turnstile privacy notice.
Booking calls with Calendly
To book calls, we use Calendly from Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. The calendar only loads when you click a link or button to choose a time. No data is transferred to Calendly before that.
When you book, Calendly processes the information you enter there – such as your name, email address and the chosen time – as well as technical data such as your IP address. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) and the initiation of a contract (Art. 6(1)(b) GDPR). Data may be transferred to the USA in the process; Calendly relies on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses for this. More information is available in Calendly’s privacy notice.
Embedded videos and podcasts
On some pages we show videos from YouTube and Vimeo and podcast episodes from Spotify. They only load when you click the preview image or “Play”. No connection to the providers is established before that. After the click, the respective provider receives in particular your IP address and the information which page you are visiting, and may use cookies or similar technologies. If you are logged in with the provider, it can link the visit to your account.
- YouTube: we embed videos in privacy-enhanced mode via youtube-nocookie.com. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information is available in Google’s privacy policy.
- Vimeo: we embed videos with the “Do Not Track” setting. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. More information is available in Vimeo’s privacy policy.
- Spotify: the provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. More information is available in Spotify’s privacy policy.
The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Where providers are based in the USA or process data there, data may be transferred to the USA; the providers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses for this.
Fonts
This website uses the Figtree typeface. It is stored on our own server and loaded from there. No connection to Google Fonts or any other font provider is made when you visit the pages.
SEO Compass on kompass.seoeffekt.de
The SEO Compass is a free website check that runs as a separate service at kompass.seoeffekt.de. If you enter an address in the Compass field on this website or follow a link to the Compass, you move to kompass.seoeffekt.de. The website address you entered and an identifier showing which of our pages you came from are passed on. Processing on kompass.seoeffekt.de is governed by the privacy policy published there.
Links to LinkedIn, WhatsApp, Google Maps and other websites
Links to LinkedIn, WhatsApp, Google Maps and other external websites are simple links, not embedded plugins. Only when you click such a link are you taken to the respective provider’s website; from then on, that provider’s privacy policy applies. No map is embedded on this website.
Job applications
If you apply to us via a form or by email, we process your details and documents in order to decide on your application. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship). If you are not hired, we delete your data after the application process has ended, unless legal reasons prevent this or you have agreed to longer storage.
Provision of paid services
To provide paid services, we request additional data, such as payment details, in order to process your order. We store this data in our systems until the statutory retention periods have expired.
Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services, for example when introducing new services. The new privacy policy will then apply to your next visit.
Questions about data protection
If you have questions about data protection, please email us at hamed@hamed.de or contact the person responsible for data protection in our organisation directly: Hamed Farhadian, address as above. You can also reach us via the contact page.
Last updated: 17 October 2026