Privacy Policy

1. Controller

2. What data we process and why

2.1 Server log files

Every time you access this website, our server automatically records: your IP address, browser and operating system (user agent), date and time of the request, and the page requested. This data is technically necessary for delivery of the website and for security purposes.

• Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure, functional website
• Retention: 7 days, then automatically deleted
• No profiling. Log data is not linked to individual users.

2.2 URL scan tool

When you submit a URL for analysis, we fetch and analyse the page content to detect Black Hat SEO signals. The URL itself may constitute personal data if it contains identifiable information. We process it solely to perform the scan you requested.

• Legal basis: Art. 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering a contract
• Retention: Scan results are not permanently stored. The URL and analysis data are discarded after the session ends.

2.3 Contact form

When you use the contact form, we collect: your name (optional), email address or phone number (required), optional message, and — if provided — the URL you scanned. This information is used solely to respond to your inquiry.

• Legal basis: Art. 6(1)(b) GDPR — processing necessary for pre-contractual measures
• Retention: Until your inquiry is fully resolved, and thereafter for up to 3 years in accordance with the statutory limitation period (§ 195 BGB)

2.4 Forwarding via Telegram

Contact form submissions are forwarded to our team via Telegram (Telegram Messenger Inc., headquartered in Dubai, United Arab Emirates). This involves a transfer of your contact data to a country outside the European Economic Area for which no EU adequacy decision exists.

• Legal basis for the transfer: Art. 49(1)(b) GDPR — transfer necessary for the performance of pre-contractual measures taken at your request (responding to your inquiry)
• Telegram processes data in accordance with its own privacy policy. We have no control over Telegram's internal data handling beyond the transmission.

3. Cookies

This website does not use tracking, analytics, or marketing cookies. No consent banner is required. If a technically necessary session cookie is set during your visit, it expires when you close your browser and requires no consent under § 25(2) TDDDG.

4. Hosting

This website is hosted on servers located in Germany. A data processing agreement (DPA) is in place with our hosting provider pursuant to Art. 28 GDPR.

5. Your rights

Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise any of these rights, contact us at hallo@waterproof.agency. We will respond within one month (Art. 12(3) GDPR).

6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: