1. Controller
The controller within the meaning of the GDPR is:
vorzeigbar Studio Maastrichter Str. 6-8 50672 Köln Email: info@vorzeigbar.com
2. Data protection contact
Kemal Duran is appointed as the contact person for data protection.
Requests can be sent directly to info@vorzeigbar.com.
3. General information on data processing
We process personal data of our users only to the extent necessary to provide a functional website and our content and services.
Processing usually takes place only with the user's consent or where a legal basis permits it.
4. Provision of the website & server log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected: IP address, date and time of access, referrer URL, amount of data transferred, user agent.
The legal basis is Art. 6(1)(f) GDPR. The data is deleted after 14 days at the latest.
5. Cookies & consent
We use cookies to keep the site running (technically necessary) and, only with your explicit consent, for statistical audience measurement with Google Analytics.
On your first visit you see a cookie banner with two equal options: "Accept all" or "Essential only". A detailed choice is possible via "Customise settings".
Legal basis for non-essential cookies: Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the footer link "Cookie settings". Analytics cookies that were set are then removed and no further data is transmitted.
6. Web analytics with Google Analytics
We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for statistical analysis of how the site is used. Processing takes place only after your consent via the cookie banner. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG.
Data processed: shortened IP address (IP anonymisation via `anonymize_ip: true` is active, the last block is removed before any storage), device and browser information, approximate location (country/region), pages visited, time spent, source of access (referrer). No advertising signals are collected (`allow_google_signals: false`), no personalisation (`allow_ad_personalization_signals: false`).
Cookies used: `_ga` (identifies the device, stored for 2 years), `_ga_<ID>` (session status, stored for 2 years). Retention of analytics data in the Google account: 14 months, then automatic deletion.
Transfer of data to the USA: Google LLC is involved as a sub-processor. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023), supplemented by standard contractual clauses under Art. 46(2)(c) GDPR.
Withdrawal of consent: at any time via the footer link "Cookie settings". You can also install the browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout
Further information: Google's privacy policy at https://policies.google.com/privacy
7. Contacting us
When you contact us by email or through the contact form, the information you provide is stored to process your request.
Legal basis: Art. 6(1)(b) and (f) GDPR. The data is deleted as soon as it is no longer needed for the purpose, at the latest after 24 months.
8. Website check (lead magnet)
If you use our website check, we process the URL you enter and your email address to send the analysis report.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract).
You can object to receiving it at any time by email. There is no automated follow-up email marketing.
9. Third-party providers
We use the following third-party providers, whose processing is based on Art. 6(1)(a) or (f) GDPR:
• Google Analytics 4 (Google Ireland Ltd., details in section 6).
We provide a complete list with data processing agreements on request.
10. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
To exercise these rights, contact info@vorzeigbar.com informally.
11. Storage period
Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention periods prevent deletion.
Retention periods under commercial and tax law can be up to 10 years.
12. Last updated
As of May 2026. We update this privacy policy when legal requirements or our processing activities change.