--- title: "Privacy policy for hamed.de | Hamed Farhadian, Hamburg" description: "Privacy policy for hamed.de: no cookies of our own, no ad tracking. Data processed for hosting, statistics, forms, call booking and embedded videos." url: https://www.hamed.de/en/privacy/ language: en author: Hamed Farhadian updated: 2026-10-19 --- # Privacy policy – What data is processed here – and why. hamed.de sets no cookies of its own and uses no advertising tracking. Personal data is only processed when you visit the website (hosting and cookieless statistics via Cloudflare), write to us using a form or subscribe to the newsletter (email delivery via Cloudflare) or activate external content such as the booking calendar or videos with a click. This page explains which data that is, what we use it for and what rights you have. *This English version is a translation provided for convenience. In case of doubt, the [German version](/datenschutz-erklaerung/) applies.* ## Who is responsible? The controller responsible for data processing on this website is: **SEOeffekt Farhadian**\ Hamed Farhadian\ Papenreye 1\ 22453 Hamburg\ Germany\ Phone: [+49 40 3556 7813](tel:+494035567813)\ Email: [hamed@hamed.de](mailto:hamed@hamed.de) Further details can be found in the [legal notice](https://www.hamed.de/en/legal-notice/). ## What are your rights? Using the contact details above, you can exercise the following rights at any time: - information about your data stored by us and how it is processed, - correction of inaccurate personal data, - deletion of your data stored by us, - restriction of processing, where we are not yet allowed to delete your data due to legal obligations, - objection to the processing of your data by us, and - data portability, where you have consented to the processing or have concluded a contract with us. If you have given us your consent, you can withdraw it at any time with effect for the future. You can lodge a complaint with the supervisory authority responsible for you at any time. Your competent supervisory authority depends on the federal state in which you live or work or in which the alleged infringement took place. A list of the supervisory authorities (for the non-public sector) with their addresses is available [from the German Federal Commissioner for Data Protection](https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html). ## For what purposes do we process data? We process your personal data only for the purposes set out in this privacy policy. Your personal data is not transferred to third parties for purposes other than those stated. We only pass on your personal data to third parties if: - you have given your express consent, - processing is necessary to perform a contract with you, - processing is necessary to comply with a legal obligation, - processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on. ## Hosting and delivery via Cloudflare This website is provided via Cloudflare: the pages are hosted on Cloudflare Workers and delivered via Cloudflare’s content delivery network (CDN). A CDN is a network of distributed servers that delivers content from the nearest location and protects the website against attacks. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data, in particular: - your IP address, - the date and time of access, - the page visited and the previously visited page (referrer), - browser type, operating system and language setting. This data is needed to deliver the website, ensure its stability and security, and fend off attacks. It is stored in server logs only for as long as necessary for these purposes and is not combined with other data. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely, quickly and reliably. Cloudflare processes the data on our behalf (data processing under Art. 28 GDPR). Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition. More information is available in [Cloudflare’s privacy policy](https://www.cloudflare.com/privacypolicy/). ## SSL/TLS encryption To protect the security of your data in transit, we use encryption methods that reflect the current state of the art (TLS, formerly SSL) via HTTPS. ## Cookies and local storage Cookies are small text files that a website stores on your device. This website does not set any cookies itself and does not use any tracking or marketing services. For visitor statistics we use Cloudflare Web Analytics, which also works without cookies (see the next section). For security reasons, Cloudflare may set technically necessary cookies, for example to distinguish automated attacks from real visitors (Art. 6(1)(f) GDPR, Section 25(2) TDDDG). External services that you activate yourself with a click – the booking calendar, videos, podcasts – may set their own cookies; see the sections below. You can restrict or disable cookies at any time in your browser settings. Please use your browser’s help function to find out how. Some features of the website, such as the spam protection in the form, may then not work. ## Visitor statistics with Cloudflare Web Analytics To understand which pages are read and where visitors come from, we use Cloudflare Web Analytics by Cloudflare, Inc. (address above). The service sets no cookies, stores nothing on your device, builds no user profiles and does not recognise you on a later visit. When you open a page, a small script from Cloudflare loads and transmits the page visited, the previous page (referrer), browser and device type, the country (derived from the IP address) and page load times. The IP address is not stored. We only see aggregated figures, never individual visitors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the website and understanding which content is helpful. Cloudflare processes the data on our behalf; for transfers to the USA, the information given above under hosting applies. See [Cloudflare’s privacy policy](https://www.cloudflare.com/privacypolicy/) for details. ## Counting clicks on contact options To see which pages lead to an enquiry, this website counts clicks on contact options: phone, email, WhatsApp, booking a call, LinkedIn, the SEO Compass, a video or submitting a form. Only the type of click, the page, the area of the page (for example header or footer) and the language are sent. No cookies are set, nothing is stored on your device, no identifier is assigned and no IP address is stored. The counting runs on Cloudflare Workers Analytics Engine, on the same infrastructure as the website; we only see aggregated numbers. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the website so that visitors find the right way to get in touch. For processing by Cloudflare, the information on hosting above applies. ## Newsletter If you sign up for my newsletter, I use your email address and – if you provide it – your first name to send you the newsletter. Sign-up uses a double opt-in process: before the first newsletter you receive an email in which you confirm your subscription; only then will I send you newsletters. We store the time of sign-up and confirmation to be able to prove your consent. Your sign-up reaches me as an email via Cloudflare Email Service (Cloudflare, Inc., see the hosting section); nothing is stored on the website itself. Before the first newsletter goes out, I will add here which service is used to send it. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time – via the unsubscribe link in every email or a short message to hamed@hamed.de. After you unsubscribe we remove your address from the mailing list; to prove earlier consent it may be kept in restricted form for up to three years. ## Contact form, questionnaires and email When you write to us by email, using the contact form or one of our questionnaires (call request, SEO check request, pre-call questionnaire), we process the information you provide. Your name and a valid email address are required; they are used to assign and answer your enquiry. All other information – such as your message, website, phone number or details about your company – is optional or needed to prepare a call, depending on the form. We also record which page you sent the enquiry from and in which language. The information is stored to handle your enquiry and any follow-up questions. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where your enquiry relates to a contract, Art. 6(1)(b) GDPR. Once your enquiry has been dealt with, we delete the personal data unless statutory retention obligations apply. **Delivery via Cloudflare:** our server sends form submissions to our inbox as an email via Cloudflare Email Service, and you receive a short confirmation of receipt at the address you entered. The provider is Cloudflare, Inc. (see the hosting section), which processes the data on our behalf (Art. 28 GDPR) and only to deliver the message. The information is not stored on the website itself. ## Spam protection with Cloudflare Turnstile To protect our forms against spam and automated attacks, we use Cloudflare Turnstile from Cloudflare, Inc. (address above). Turnstile is only loaded once you start filling in a form – not while you are simply reading the website. Turnstile uses technical signals to check whether a person or a program is using the form. In the process, your IP address and information about your browser and device in particular are transmitted to Cloudflare. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is preventing spam and misuse of the forms. The information on transfers to the USA given for Cloudflare above applies. More information is available in [Cloudflare’s Turnstile privacy notice](https://www.cloudflare.com/turnstile-privacy-policy/). ## Booking calls with Calendly To book calls, we use Calendly from Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. The calendar only loads when you click a link or button to choose a time. No data is transferred to Calendly before that. When you book, Calendly processes the information you enter there – such as your name, email address and the chosen time – as well as technical data such as your IP address. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) and the initiation of a contract (Art. 6(1)(b) GDPR). Data may be transferred to the USA in the process; Calendly relies on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses for this. More information is available in [Calendly’s privacy notice](https://calendly.com/privacy). ## Embedded videos and podcasts On some pages we show videos from YouTube and Vimeo and podcast episodes from Spotify. They only load when you click the preview image or “Play”. No connection to the providers is established before that. After the click, the respective provider receives in particular your IP address and the information which page you are visiting, and may use cookies or similar technologies. If you are logged in with the provider, it can link the visit to your account. - **YouTube:** we embed videos in privacy-enhanced mode via youtube-nocookie.com. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information is available in [Google’s privacy policy](https://policies.google.com/privacy). - **Vimeo:** we embed videos with the “Do Not Track” setting. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. More information is available in [Vimeo’s privacy policy](https://vimeo.com/privacy). - **Spotify:** the provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. More information is available in [Spotify’s privacy policy](https://www.spotify.com/legal/privacy-policy/). The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Where providers are based in the USA or process data there, data may be transferred to the USA; the providers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses for this. ## Fonts This website uses the Figtree typeface. It is stored on our own server and loaded from there. No connection to Google Fonts or any other font provider is made when you visit the pages. ## SEO Compass on kompass.seoeffekt.de The SEO Compass is a free website check that runs as a separate service at kompass.seoeffekt.de. If you enter an address in the Compass field on this website or follow a link to the Compass, you move to kompass.seoeffekt.de. The website address you entered and an identifier showing which of our pages you came from are passed on. Processing on kompass.seoeffekt.de is governed by the privacy policy published there. ## Links to LinkedIn, WhatsApp, Google Maps and other websites Links to LinkedIn, WhatsApp, Google Maps and other external websites are simple links, not embedded plugins. Only when you click such a link are you taken to the respective provider’s website; from then on, that provider’s privacy policy applies. No map is embedded on this website. ## Job applications If you apply to us via a form or by email, we process your details and documents in order to decide on your application. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship). If you are not hired, we delete your data after the application process has ended, unless legal reasons prevent this or you have agreed to longer storage. ## Provision of paid services To provide paid services, we request additional data, such as payment details, in order to process your order. We store this data in our systems until the statutory retention periods have expired. ## Changes to this privacy policy We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services, for example when introducing new services. The new privacy policy will then apply to your next visit. ## Questions about data protection If you have questions about data protection, please email us at [hamed@hamed.de](mailto:hamed@hamed.de) or contact the person responsible for data protection in our organisation directly: Hamed Farhadian, address as above. You can also reach us via the [contact page](https://www.hamed.de/en/contact/). Last updated: 17 October 2026 ## Contact - Contact form: https://www.hamed.de/en/privacy/#kontakt - Email: hamed@hamed.de - Phone: +49 40 3556 7813