Privacy Policy (GDPR)

The contact form and the homepage form

What: Contact form: name, email address, message and, optionally, your website address. Homepage form: your email address only.

Why: We reply to your request and discuss a possible collaboration. We send no newsletter and do not add your address to any mailing list without your explicit consent.

Legal basis: Consent (Art. 6(1)(a) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).

If you do not provide the data: Providing it is not required by law or by contract. Without your email address (and, in the contact form, your name and message) we cannot reply to your request.

Free mini-audit (/en/free-ai-audit/)

What: The address of the website analysed, your email address, your phone number (optional), your IP address, a unique request code (token) and the results of the audit generated for your website.

Why: We generate and send you the report you asked for. Your IP address and email address are also used to limit requests to one audit per 24 hours per address, so the service is not abused. After the report, we may send you a single follow-up email to ask whether you need any clarification.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for generating the requested report, limiting abuse and the follow-up email; consent (Art. 6(1)(a) GDPR) for the phone number, which is optional.

If you do not provide the data: Providing it is not required by law or by contract. Without the website address and your email address we cannot generate and send the report; the phone number can be left out.

How it works: Your request reaches an automated workflow (n8n, our own server), and the list of requests and their results are kept in a Google Sheet through Google Apps Script; the report is emailed from a Google account. Your website is analysed on our own infrastructure. Public technical data about the site may be sent to third-party services for interpretation and measurement (a language model through OpenRouter, Google CrUX/PageSpeed, Ahrefs). Your email address and phone number are NOT sent to those services.

Professional contact details of the companies we approach (prospects)

What: Trade name, web domain, professional contact email and phone, city, industry, plus public technical observations about the website (search result positions, missing SEO elements, presence in AI search answers).

Where from: Exclusively from public sources — the contact page a company publishes on its own website, the public Google Business profile and public search engine results. We do not buy address lists and we do not collect data from private sources.

Why: We write to you once, with a concrete observation about your company’s website, to offer a service that fixes exactly that. We send at most one follow-up message.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), within the meaning of Recital 47. We documented the balancing test in a written assessment (LIA), available on request.

How to stop: Reply STOP to any message from us, or write to the address in section 6. We stop immediately and permanently, without asking for reasons. We keep only your address on a suppression list, precisely so that you are not contacted again.

What we do NOT do: We do not track whether you opened a message (no tracking pixel), we do not build behavioural profiles, we make no automated decisions that affect you and we do not process special categories of data.

This section is the notice required by Art. 14 GDPR, for the case where the data was not obtained directly from the data subject.

Bookings and messages through external services (Cal.com, WhatsApp)

What: If you book a discovery call through Cal.com or message us on WhatsApp, the details you enter there (usually name, email or phone number, booking time, message content) are processed by that service under its own policy, and we receive what you send us.

Legal basis: Steps taken at your request before a possible collaboration (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).

Web traffic data (Google Analytics 4)

What: Visits, pages viewed, traffic source, device, country, events (for example a click on "Book a call", a form submission) — via the _ga and _ga_<container id> cookies.

Why: We learn how the site is used so we can improve it and for reporting.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Audience measurement is active for all visitors from the first visit, through Google Analytics 4 (Google Consent Mode, analytics enabled; advertising signals reflect your choice on the marketing category, off by default). The cookie banner and preferences modal distinguish 3 categories — necessary and analytics remain mandatory, only marketing is optional (opt-in). You can object to the processing (Art. 21 GDPR) by writing to the email address in the contact section, by blocking cookies in your browser settings, or by installing the official Google Analytics Opt-out extension (tools.google.com/dlpage/gaoptout).