Privacy Policy

Section 1

Data protection at a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. For detailed information on data protection, please refer to the full privacy policy set out below this text.

Data collection on this website

Who is responsible for data collection on this website?
Data on this website is processed by the website operator. You will find their contact details in the section “Controller” of this privacy policy.

How do we collect your data?
Some of your data is collected because you provide it to us — for example when you fill in the contact form. Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is mainly technical data (such as your browser, operating system or the time of the page request).

What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse how visitors use the site or to respond to enquiries.

What rights do you have regarding your data?
You have the right, at any time and free of charge, to receive information about the origin, recipients and purpose of the personal data stored about you. You also have the right to request that this data be corrected or erased. If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted.

Section 2

Controller

The controller for the purposes of the GDPR, other national data protection laws and further data protection provisions is:

Section 3

Hosting

This website is hosted by an external service provider (the host). Personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website accesses and other data generated through a website.

The host is used for the purpose of performing our contract with prospective and existing clients (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

Our host will process your data only to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to that data.

Section 4

General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

When you use this website, various items of personal data are collected. Personal data means data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it (for example retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds no longer apply.

Legal bases for processing

Where we have obtained your consent for the processing of personal data, Art. 6(1)(a) GDPR is the legal basis for the processing. Where processing is necessary for the performance of a contract to which you are a party, or in order to take pre-contractual steps, Art. 6(1)(b) GDPR is the legal basis. Art. 6(1)(c) GDPR applies to processing necessary to comply with a legal obligation. Where processing is necessary to protect a legitimate interest of our company or of a third party, Art. 6(1)(f) GDPR is the legal basis.

Withdrawing your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content — such as orders or enquiries you send to us as the site operator — this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar.

Section 5

Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website — for this, the server log files must be recorded.

Cookies and similar technologies

Without your consent, only technically necessary data required to operate the website is used. This includes your choice from the cookie notice: it is stored locally in your browser so that you are not asked again on every page you visit.

Only after your express consent do we additionally load the web analytics and reach measurement services described in Section 10, which use cookies and comparable technologies. If you decline or make no choice, these services are not loaded and no data is transmitted to the providers named there.

Section 6

Contact form and email contact

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form, including the contact details you give there, are stored by us in order to process the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies (for example once we have finished handling your enquiry). Mandatory statutory provisions — in particular retention periods — remain unaffected.

Your enquiry is first stored on our hosting provider's web server (see the section Hosting) and then transferred to our customer management system for processing. This system runs on servers of Fly.io, Inc. (server location Frankfurt am Main, Germany) with a database provided by Supabase Inc., as described in the section on the AI visibility check. The notification to us and the confirmation to you are sent via Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Enquiry by email or telephone

If you contact us by email or telephone, your enquiry including all personal data arising from it (name, enquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take pre-contractual steps.

Section 7

Google Fonts

For a consistent display of typefaces, this site uses so-called Google Fonts, provided by Google. When you open a page, your browser loads the required fonts into its browser cache in order to display text and typefaces correctly.

For this purpose, the browser you use must connect to Google’s servers. This means Google learns that this website has been accessed from your IP address. Google Fonts is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the consistent presentation of typography on the website.

If your browser does not support Google Fonts, a standard font from your computer is used. Further information on Google Fonts is available at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy .

Section 8

Social media

LinkedIn

This website contains a link to the social network LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When you click the link, you are redirected to the LinkedIn platform. Data may be transmitted to LinkedIn in the process.

Further information on data processing by LinkedIn can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy .

Instagram

This website contains a link to the social network Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you click the link, you are redirected to the Instagram platform.

Further information on data processing by Instagram can be found in the Meta/Instagram privacy policy at: https://privacycenter.instagram.com/policy .

Section 9

Appointment booking (Calendly)

For booking an initial call I use the service Calendly. The provider is Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA.

The booking calendar is displayed in a window on this website. It is only loaded once you click the “Book an intro call” button — before that, no connection to Calendly is established and no data is transmitted. When you open the calendar, your browser connects to Calendly and your IP address is transmitted to them.

When you use the booking calendar, the following data may be transmitted to Calendly:

• IP address
• Information about the browser and device used
• Name and email address (when booking an appointment)
• Date and time of the requested appointment and your time zone
• Any voluntary details you enter in the booking form

The processing takes place on the basis of Art. 6(1)(b) GDPR (initiation of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient appointment management). Data is transferred to the USA on the basis of the European Commission’s standard contractual clauses.

If you would rather not open the calendar on this website, you can reach it via the “Open in a new tab” link or directly at calendly.com. An informal email to info@brandancy.de works just as well.

Further information can be found in Calendly’s privacy notice: https://calendly.com/legal/privacy-notice .

Section 10

Web analytics and reach measurement

The services described in this section are loaded only after your express consent. Before you agree in the cookie notice, no data is transmitted to the providers named here and no corresponding scripts are executed.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by clicking “Change cookie settings” below and then selecting “Decline”.

Google Analytics 4

Subject to your consent, this website uses the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies that make it possible to analyse how this website is used.

The following data, among others, may be processed: truncated IP address, pages visited, time spent on the site, approximate location at city or region level, the device, browser and operating system used, and the source of the visit. IP anonymisation is enabled, so your IP address is truncated before it is stored.

A transfer of data to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy .

OpenAI measurement pixel

Subject to your consent, this website uses a measurement pixel provided by OpenAI. It records whether and how often certain actions take place on this website — specifically, submitting the contact form and clicking the appointment booking button. The service is provided by OpenAI; the SDK is loaded from the domain bzrcdn.openai.com.

The purpose of the processing is to measure the success of advertising activities. The following data in particular may be processed:

• IP address
• Information about the browser and device used
• Time and type of the action triggered (for example “appointment booking started”)
• The page of this website that was accessed

A transfer of data to the USA is possible in this context. Further information on data processing by OpenAI is available at https://openai.com/policies/privacy-policy/ .

Microsoft Clarity

With your consent, this website uses Microsoft Clarity, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity shows us how the website is used, for example through clicks, mouse movements and scroll depth, as heatmaps and as session recordings. Input in form fields is masked and not recorded. Clarity uses cookies and similar technologies.

The data processed may include a shortened IP address, pages viewed, clicks and scrolling behaviour, device, browser and operating system, and the source of the visit. A transfer of data to the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework. More information: https://privacy.microsoft.com/en-us/privacystatement .

Withdrawing consent

You can use the button below to make your choice again at any time. After a withdrawal, the services named above are no longer loaded.

Change cookie settings

Section 11

AI Visibility Check

On the page AI Visibility Check and via the input field on the homepage, you can have a website address checked. The check retrieves the publicly accessible homepage of the address you enter and evaluates it automatically. No content is modified and nothing is installed.

To start the check, the following is processed: the website address you entered, your IP address (to limit abusive repeat requests) and the date and time. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the service free of abuse).

If you would like to receive the full report, you additionally provide your email address and, optionally, your company name. These details are used solely to send you the report, to follow up on it once or twice over the following days, and to answer any question about it. After that the contact ends automatically. No newsletter is sent and no data is passed to third parties for advertising purposes; every one of these emails contains an unsubscribe link that ends the contact immediately. The legal basis is your consent under Art. 6(1)(a) GDPR, which you give expressly in the form, and Art. 6(1)(b) GDPR (taking pre-contractual steps).

The check and the dispatch of the report run technically via an application operated by us at Fly.io, Inc., 2261 Market Street #4990, San Francisco, CA 94114, USA (server location Frankfurt am Main, Germany). The results are stored in a database provided by Supabase Inc. (server location EU). Data processing agreements are in place with both providers; the European Commission’s standard contractual clauses apply to transfers to the USA.

Check results are stored for a maximum of twelve months so that a repeat request remains traceable and a comparison is possible. You may withdraw your consent at any time with effect for the future — an informal email to torben.seib@brandancy.de is sufficient; your details will then be deleted.

Section 12

Your data protection rights

You have the following rights against us with regard to the personal data concerning you:

To exercise your rights, please contact: info@brandancy.de

You also have the right to withdraw consent to data processing at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of that consent up to the point of withdrawal.

Section 13

Right to lodge a complaint with a supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

The competent supervisory authority in Germany is the respective state data protection commissioner. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de .