Privacy Policy

1. Overview and principles

Protecting your personal data matters to us. This website is deliberately built to be data-minimal: we use no tracking cookies, no advertising networks and no third-party analytics services. We process personal data only insofar as this is necessary to provide the website and to handle your inquiries.

In accordance with the General Data Protection Regulation (GDPR), this policy informs you about which data we process, for which purposes, on which legal basis, and which rights you have.

2. Controller

The controller within the meaning of the GDPR is: Kostiantyn Mykhailov, SaaleWeb, Hettstedter Str. 64, 06124 Halle (Saale), Germany.

Phone: +49 176 71764743 · Email: mykhailov@saaleweb.de

No data protection officer has been appointed, as the legal requirements for a mandatory appointment are not met.

3. Hosting and server log files

This website is hosted by Hostinger (Hostinger operations, UAB, Švitrigailos g. 34, 03230 Vilnius, Lithuania) within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When you access the website, the server automatically processes technical access data (server log files): IP address, date and time of the request, page accessed, amount of data transferred, browser type and version, operating system and the previously visited page (referrer URL).

This data serves the technical provision, stability and security of the website (e.g. defence against attacks) and is automatically deleted after a short period. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

4. Database

Website content and inquiries submitted via the contact form are stored in a database operated by Neon (Neon, Inc.). The database runs in the Frankfurt am Main region (Germany, EU); the data therefore remains within the European Union. A data processing agreement pursuant to Art. 28 GDPR, including EU standard contractual clauses, is in place with the provider.

5. Contact form and inquiries

If you send us an inquiry via the contact form or by email, we process the data you provide: name, email address, optionally phone number and company, and your message.

Processing takes place to handle your inquiry and for possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or contract performance) and, in addition, our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).

Your details are deleted as soon as they are no longer required for processing and no statutory retention obligations (e.g. under commercial or tax law) prevent deletion.

6. Email notifications and SMTP delivery

We use the business email mailbox mykhailov@saaleweb.de and Hostinger's SMTP server to send internal notification emails about new inquiries and newsletter confirmation emails. The data required for the respective email (for example email address, name, message, language and technical delivery data) may be processed by Hostinger.

Hostinger processes this data as a technical email and hosting provider under its privacy and data processing terms. The legal basis is Art. 6(1)(b) GDPR for handling inquiries, Art. 6(1)(f) GDPR for reliable technical delivery and, for newsletter confirmations, your consent pursuant to Art. 6(1)(a) GDPR.

7. Newsletter (double opt-in)

You can subscribe to our newsletter with practical tips on websites, local SEO and AI visibility. For this purpose we process your email address and the selected language version.

Subscription uses the double opt-in procedure: after signing up, you receive an email with a confirmation link. The subscription only becomes effective with this confirmation; unconfirmed sign-ups do not receive the newsletter. Confirmation and newsletter emails are sent via the business SMTP mailbox described in section 6.

The legal basis for the processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every newsletter email or informally by emailing us. Upon unsubscribing, your email address is deleted from the list.

8. Cookie-free reach measurement (first-party statistics)

We collect anonymous usage statistics with our own privacy-friendly solution – without third parties, without cookies and without storing or reading information on your device. No access within the meaning of Section 25 TDDDG takes place; consent is therefore not required.

The following is recorded: page accessed, language version, referrer (referring page) and a technical visitor value. This value is generated server-side as a one-way hash (SHA-256) from the current date, the IP address, the browser user agent and a secret random value (salt). The IP address itself is not stored; the hash changes daily and does not allow identification of a person or cross-site tracking. Requests from known bots are discarded.

The purpose is the statistical evaluation of the use of our website (e.g. which pages are accessed how often). The legal basis is our legitimate interest in analysing and improving our services (Art. 6(1)(f) GDPR).

9. Cookies

This website does not use cookies for analytics, tracking or advertising purposes.

Technically necessary cookies may be set in two cases: to store your language selection (when you switch the website language) and for the login of authorised administrators in the internal administration area. These cookies are strictly necessary for the requested function (Section 25(2) no. 2 TDDDG); the legal basis for the associated data processing is Art. 6(1)(f) GDPR.

10. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as inquiries via the contact form, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the prefix “https://” and the lock symbol in your browser's address bar.

11. Your rights

You have the following rights regarding your personal data:

• Right of access to the processed data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to mykhailov@saaleweb.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragter für den Datenschutz Sachsen-Anhalt), Otto-von-Guericke-Str. 34a, 39104 Magdeburg, Germany.

12. Storage period, obligation to provide data, automated decisions

Unless a more specific storage period is stated in this policy, personal data remains with us until the purpose of processing ceases to apply or you exercise a right to erasure or objection – subject to statutory retention periods (in particular under commercial and tax law).

The provision of personal data is neither legally nor contractually required; however, we cannot answer inquiries without contact details. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

13. Validity and changes to this privacy policy

We reserve the right to adapt this privacy policy if the legal situation, the website or the services used change. The version published on this page at the respective time applies.