01Controller
The controller for the processing of data on this website is:
Hamidullah Ghafoorie Ghasto Agentur Kölner Platz 2 53840 Troisdorf Germany Phone: 02241 26 12 090 Email: kontakt@ghasto.de
DEEN
// legal
What data this website processes, what for, and what rights you have.
The controller for the processing of data on this website is:
Hamidullah Ghafoorie Ghasto Agentur Kölner Platz 2 53840 Troisdorf Germany Phone: 02241 26 12 090 Email: kontakt@ghasto.de
This website sets no cookies, runs no advertising services and embeds no third-party content. Fonts and images load straight from our own server. How often our pages are opened we measure without cookies and without any identifier on your device; the details are under “Visitor measurement”. We process personal data only as far as it takes to deliver the website and to answer your enquiries.
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you open our website, Vercel processes the technically necessary data (see server log files) in order to deliver the pages. Vercel runs a worldwide network of servers for this, so data may also be processed in the USA.
Vercel is certified under the EU-US Data Privacy Framework. The transfer to the USA is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). We have a data processing agreement with Vercel under Art. 28 GDPR. The legal basis for hosting is our legitimate interest in delivering the website securely and reliably (Art. 6 (1) (f) GDPR). More on this: https://vercel.com/legal/privacy
Every time the website is opened, information your browser sends is recorded automatically:
This data serves one purpose: to deliver the website without technical faults and to keep it secure, for example against attacks. It is never merged with other sources. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted automatically after a short time.
When you write to us through the contact form, we process your details in order to handle your enquiry and reply to you. That covers your name, email address and message, and, if you choose to give them, your phone number, company, budget range and the services you are interested in. The details are transmitted encrypted and take two routes: they reach us as an email in our kontakt@ghasto.de mailbox, and they are stored in our own client system, Ghasto OS, as a contact and as an enquiry, so that we can keep track of where it stands.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or to steps taken before entering one. Otherwise we rely on our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We delete the message and the entry once your enquiry is settled and no statutory retention period applies. If no engagement comes of it, we delete the entry within twelve months at the latest.
Ghasto OS is our own client system. It runs on the Supabase platform (Supabase Pte. Ltd., Singapore). The data sits in a data centre in Frankfurt am Main inside the European Union. We have a data processing agreement with Supabase under Art. 28 GDPR. Access is limited to people who work at Ghasto Agentur, each with their own account and their own login.
For the free visibility check we process the details from the form: company name, website, town, email address and, if you choose to give it, your phone number. From the company name, the website and the town we work out how findable your company is on Google, in AI answers such as ChatGPT and on your own website. We send you the result by email and get in touch with you about it.
The legal basis is your consent (Art. 6 (1) (a) GDPR), which you give in the form. You can withdraw it at any time with effect for the future; a message to kontakt@ghasto.de is enough. We delete the result 14 days after the check. If no appointment comes of it, we delete the rest of your details after 90 days. Both happen automatically, once a day.
For the analysis we query three services. To DataForSEO we send the search terms a client would use to look for your service, together with the town or the coordinates of your place of business; from there we receive the Google results. To the OpenAI programming interface we send the same search terms along with your company name and an extract of the text on your home page, so that we can tell what your company earns its money with; from there we receive the answers out of ChatGPT. To the Google Places API we send your company name and your web address in order to determine your place of business. That place decides the result, because the same question is answered differently from different locations.
None of these three services receives your name, your email address or your phone number. Those details stay on our server and in Ghasto OS. Your website we fetch ourselves, the same way any visitor does.
From every check we keep one anonymous statistic: which of the eight kinds of question was asked, which industry it belonged to, and whether anyone was named in the answer. Out of that come topics for our articles. This statistic holds neither your town nor your company name, your web address or any identifier of your check; it cannot be traced back to you. It therefore stays once the rest of your details are deleted.
If you book a call after the check, we process your name, your company name, your email address and the time you picked. If you gave a phone number, that belongs to it. The legal basis is the performance of steps taken before entering a contract, at your request (Art. 6 (1) (b) GDPR).
The appointment is entered in our calendar at Google. What reaches Google is the company name, the web address that was checked, the time and length of the call, and a reference under which we look your details up in our own system. Your name, your email address and your phone number are withheld from Google; they stay on our server and in Ghasto OS. The calendar is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to the USA cannot be ruled out.
We hold the call over Google Meet. You receive the joining link with the confirmation email, along with a calendar file for your own calendar. When you join the video room, Google processes your connection data.
If you would rather hold the call away from Google, write to us at kontakt@ghasto.de. We will then arrange it another way.
When you contact us by email or phone, we process your details (such as your name, contact details and what the enquiry is about) in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or to steps taken before entering one. Otherwise Art. 6 (1) (f) GDPR applies. We delete your data once the purpose falls away and no statutory retention period applies.
On this website we show extracts from reviews that clients left on our Google Business Profile. The texts are stored on our own website. Showing them opens no connection to Google. Only when you click a link to our Google profile do you leave our website. From that point the privacy policy of Google applies.
We use Vercel Web Analytics and Vercel Speed Insights to see how often our pages are opened and how fast they load. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, who also host our website.
Alongside the page views we count four steps, so that we know where visitors drop out: that a visibility check was started, that a result was shown, that an appointment was booked, and that the contact form was sent. What is counted is only THAT the step happened, without any name, address or other detail from the form.
No cookies are set and no identifiers are stored on your device. No profile is built, and individual people cannot be recognised again. Details such as the page opened, the page you came from, device type, browser and approximate country are turned into an anonymous value at the moment they are collected; your IP address is left unstored.
The legal basis is our legitimate interest in a website that is quick and easy to follow (Art. 6 (1) (f) GDPR). Since no cookies are set and nothing is read from your device, consent under § 25 TDDDG is unnecessary. We keep the aggregated figures for up to twelve months.
In the footer we link to our profiles on Instagram, Facebook, TikTok and YouTube. These are plain links, not embedded components of those providers. As long as you leave a link unclicked, no connection to the providers is opened and no data reaches them.
Click a link and you leave our website. From that point the privacy policy of the provider in question applies. They learn your IP address and, if you are logged in there, your user account. Instagram, Facebook, WhatsApp and Threads are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If you use our WhatsApp button, WhatsApp opens with a chat to our number. Your number and the content of your message are transmitted to Meta and processed there under their terms. Meta also processes data in the USA. The legal basis is your consent, which you give with the click (Art. 6 (1) (a) GDPR), together with our legitimate interest in an easily reachable way to get in touch (Art. 6 (1) (f) GDPR). If you would rather avoid that, you can reach us just as well by phone, by email or through the contact form.
Messages that reach us over WhatsApp sit on the device we use the service with. We delete them once your enquiry is settled and no statutory retention period applies.
This site uses SSL and TLS encryption. You can tell an encrypted connection by the “https://” in the address bar of your browser and by the padlock symbol.
You have the right, at any time, to:
For all of this a message to kontakt@ghasto.de is enough. You can also complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Where this policy names no more specific period, your data stays with us until the purpose of the processing falls away. After that it is deleted, unless statutory retention periods require us to keep it longer.
This page is a translation. It is here so that English-speaking clients can read what the German original says. In any question of law the German version applies.