Privacy Policy

Last updated: May 2026

1. Data Controller

Oliver Schoepe
WebDesign Costa Blanca
c/ Dione 11, 03700 Dénia, Alicante, Spain
E-mail: oliver@webdesign-costablanca.es
NIF: X6110622M

2. Data Processing Principles

I only process personal data when there is a legitimate reason to do so. This website does not collect data in the background and does not use tracking or advertising networks.

3. Contact Form

When you use the contact form, the following data is collected:

  • Your name
  • Your email address or WhatsApp number
  • Your voluntary information about the project
  • The selected package (if submitted via a package link)

Purpose: Processing your enquiry and getting in touch.
Legal basis: Art. 6(1)(a) GDPR (your explicit consent via checkbox) and Art. 6(1)(b) GDPR (pre-contractual measures).
Retention period: Enquiries are deleted once they are no longer needed for processing, at the latest after 24 months.

Your data will not be passed on to third parties for advertising purposes. You can withdraw your consent at any time by contacting me by email.

4. Website Check (audit form)

When you use the free website check, the following data is collected:

  • Your name and email address
  • Your phone number (optional)
  • The URL of your website
  • Information about your business, your goals and your planning stage
  • Your self-assessment of your website's legal status

Purpose: Producing a personalised website assessment and sending it to you by email. If you would also like to receive tips and offers about my services, you can agree to that via a separate, optional checkbox.
Legal basis: Art. 6(1)(a) GDPR (your consent via the relevant checkbox). Commercial emails are only sent with your consent; you can withdraw it at any time via the unsubscribe link in every email or by messaging me.
Proof of consent: As proof of your consent (Art. 7 GDPR) I store the timestamp, the IP address and the version of the consent text shown.
Retention period: The form data is stored on the server and deleted at the latest after 12 months.

To produce the assessment, the URL of your website and technical page data (load time, page structure, screenshots) are forwarded to external services (see section 5). Your personal contact data (name, email, phone) is not transferred to these services. I review the results personally before getting in touch with you.

5. Data Processors

I use the following services to process contact enquiries and website analyses:

Brevo (formerly Sendinblue)
Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France
Purpose: CRM and transactional email delivery (contact enquiries and sending the assessments)
Privacy: brevo.com/legal/privacypolicy

A Data Processing Agreement (DPA) in accordance with Art. 28 GDPR has been concluded with Brevo.

Anthropic PBC
548 Market St PMB 90375, San Francisco, CA 94104, USA
Purpose: AI-assisted analysis of the website content to produce the assessment. Transferred: the website URL, business type, goal description and technical page data and screenshots, no personal contact data.
Data transfer to the USA on the basis of standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
Privacy: anthropic.com/legal/privacy

Microlink
Purpose: technical screenshot creation of the submitted website URL
Privacy: microlink.io/privacy

Google PageSpeed Insights
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: analysis of the loading speed and technical performance of the submitted website URL
Privacy: policies.google.com/privacy

6. Hosting

This website is hosted by:
ALL-INKL.COM, Neue Medien Münnich
Hauptstraße 68, 02742 Friedersdorf, Germany
Privacy: all-inkl.com/datenschutzinformationen

The host automatically collects information in server log files that your browser transmits (IP address, date and time of access, page accessed, browser type). This data is stored for technical purposes and is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR.

7. Fonts

This website uses the fonts "Plus Jakarta Sans" and "DM Sans". The font files are stored on the web server and loaded directly from there. No connection is made to external servers (e.g. Google). No personal data is transferred to third parties.

8. Cookies and Local Storage

This website stores your consent decision in your browser's local storage (localStorage). Analytics cookies (Google Analytics 4) are only set if you have consented to their use in the cookie banner.

Further information can be found in the Cookie Policy below.

9. Your Rights

Under GDPR you have the following rights:

  • Access (Art. 15 GDPR), you may request information about the data stored about you.
  • Rectification (Art. 16 GDPR), you may have inaccurate data corrected.
  • Erasure (Art. 17 GDPR), you may request the deletion of your data.
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR), you may object to the processing of your data.
  • Withdrawal of consent (Art. 7(3) GDPR), consent given can be withdrawn at any time.

To exercise your rights, please contact: oliver@webdesign-costablanca.es

10. Right to Lodge a Complaint

As I am based in Spain, the competent data protection supervisory authority is the Agencia Española de Protección de Datos (AEPD):

C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es

You have the right to lodge a complaint with this authority if you believe that the processing of your data violates the GDPR.

11. Newsletter (5-Minuten-Brief)

You can subscribe to the free "5-Minuten-Brief", via the sign-up form in the footer, at the end of blog articles, or via a separate checkbox in the website check. Your email address and, if provided, your name are collected.

Double opt-in: After signing up you receive a confirmation email. You are only added to the recipient list once you click the link it contains. If you don't click it, nothing is stored.
Purpose: Regular tips and information about your website and digital visibility.
Legal basis: Art. 6(1)(a) GDPR (your consent).
Unsubscribe: You can unsubscribe free of charge at any time via the link at the end of each issue, thereby withdrawing your consent for the future.
Email service provider: Sending is handled via Brevo (see section 5).

Cookie Policy

This website distinguishes between technically necessary entries in local storage and optional analytics cookies, which are only set with your explicit consent.

Name Type Purpose Retention
wdcb_banner_shown localStorage Records that the cookie notice has already been shown so it does not reappear on every visit Permanent (until deleted in browser)
wdcb_analytics localStorage Stores your analytics consent decision (1 = accepted, 0 = declined) Permanent (until deleted in browser)
_ga Cookie (Google Analytics 4) Distinguishes users for statistical analysis of visitor behaviour. Only set if you have consented to analytics. Legal basis: Art. 6(1)(a) GDPR. 2 years
_ga_KR0EQ5SR1F Cookie (Google Analytics 4) Stores the session state for Google Analytics 4. Only set if you have consented to analytics. Legal basis: Art. 6(1)(a) GDPR. 2 years

Advertising cookies and social media tracking pixels are not used.

The analytics cookies are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). In the process, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses pursuant to Art. 46(2)(c) GDPR apply as an additional safeguard. Further information: policies.google.com/privacy. You can also opt out of Google Analytics measurement using Google's browser add-on: tools.google.com/dlpage/gaoptout.

You can withdraw or change your consent at any time: the "Cookie settings" link in the footer reopens the cookie notice so you can adjust your choice. You can also delete or block cookies and local storage entries at any time via your browser settings.