Privacy Policy

1. Controller

2. Hosting

This website is hosted by domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany. When this site is accessed, the host processes technically necessary data (IP address, date/time, requested URL) on the basis of its legitimate interest under Art. 6(1)(f) GDPR. For details, see the privacy policy of domainfactory.

3. Contact form

If you send me a message through the contact form, the data you provide (first name, last name, email address, phone number, message) is processed to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

The form data is transmitted via the Web3Forms service (Outerbase Inc.). A data processing agreement is in place. The data is used solely to forward your message to my email address and is not stored permanently or passed on to third parties.

To protect against automated requests (spam), Cloudflare Turnstile is used. This transmits technical data (IP address, browser information) to Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in securing the form).

4. Meta Pixel and Conversions API

On the UX audit pages (ux-audit.html and danke.html) I use the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland to measure the success of my ads. The pixel is loaded only if you agree in the consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, no data is sent to Meta and no cookies are set.

With your consent, the pixel records the page view, the submission of the order form, and the completion of a purchase. Cookies may be set and information such as your IP address, browser data, and the page visited may be transmitted to Meta.

In addition, on a completed purchase I send a server-side event to Meta (Conversions API). Email address, name, postal code, city, and country are hashed before transmission, so Meta can only match them against existing accounts but cannot read them in plain text.

Meta also processes the data in the USA. Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. I have agreed joint controllership for the collection with Meta (Art. 26 GDPR); the agreement is available at https://www.facebook.com/legal/controller_addendum.

You can withdraw your consent at any time with effect for the future by deleting the choice stored in your browser (local storage, entry „tracking-consent") or by sending me a short message. More information: https://www.facebook.com/privacy/policy

5. Google Analytics

On all pages of this website I use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. I use Google Consent Mode v2, with consent set to "denied" by default.

Without your consent, no cookies are set and no personal data such as your full IP address is stored. Only anonymous, aggregated signals without cookies are transmitted to Google, from which Google models reach (legal basis Art. 6(1)(f) GDPR, legitimate interest in data-minimal reach measurement).

Only once you agree in the consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG) does Google Analytics fully record how you use the website, such as the pages you visit, time spent, approximate location, and your device and browser, setting cookies for this purpose. This data helps me understand and improve the website.

Google also processes the data in the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy

6. Fonts

This website uses Inter as a variable font. The font file is served from my own server. There is no connection to Google Fonts or other font CDNs.

7. Tracking and analytics

For reach measurement I use Google Analytics across the entire website (see section 5) and the Meta Pixel on the UX audit pages (see section 4). Without your consent, no cookies are set on any page: the Meta Pixel is not loaded at all, and Google Analytics runs solely in the cookieless Consent Mode, transmitting only anonymous, aggregated signals. Cookies and full measurement occur only after your consent.

Your choice is stored locally in your browser (entry „tracking-consent"). You can withdraw it at any time with effect for the future by deleting this entry. Apart from these services, only the technically necessary data is processed by the host (see section 2).

8. Your rights

You have the right to access, rectification, erasure, and restriction of the processing of your personal data, as well as the right to data portability. You also have the right to lodge a complaint with a data protection supervisory authority.

For enquiries, contact: ko@korayoenal.de

9. Status

Last updated: May 2026