Protecting your personal data matters to us. This privacy policy explains which personal data is processed when you visit this website, contact us, book an appointment or use our services, why this happens and which rights you have.
The controller responsible for data processing on this website is: MovaWerk, sole proprietorship, owner: Dr. Seyed Mohammadreza Hosseini, c/o Iranet, Vaihinger Markt 30, 70563 Stuttgart, Germany.
Email: info@movawerk.de. Website: www.movawerk.de.
We process personal data only to the extent necessary to provide this website, answer inquiries, enable appointments, prepare offers, prepare or perform contracts, process payments and comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person, such as name, email address, phone number, IP address, company information, payment data or the content of a message.
Processing is based in particular on Art. 6(1)(b) GDPR, Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR and Art. 6(1)(a) GDPR where consent is required.
When this website is accessed, technically necessary data is processed so that the website can be displayed and operated securely. This may include IP address, date and time of access, visited pages or files, referrer URL, browser type and version, operating system, device information, transferred data volume, status codes and technical error messages.
This data is processed to provide the website technically, ensure stability and security, detect misuse and analyze technical errors. The legal basis is Art. 6(1)(f) GDPR.
Our website is provided through the hosting service Vercel. The provider is Vercel Inc., USA.
When visiting the website, Vercel may process technical access data, in particular IP addresses, browser and device data, timestamps, visited pages and technical log data. Processing serves technical delivery, performance, security, availability and error analysis.
The legal basis is Art. 6(1)(f) GDPR. Where Vercel processes personal data on our behalf, this is done on the basis of a data processing agreement under Art. 28 GDPR where such an agreement is available and concluded. For third-country transfers, we ensure appropriate safeguards under Art. 44 et seq. GDPR.
We use Sanity as a content management system to manage website content. The provider is Sanity AS or the relevant Sanity entity.
Sanity is used to store and manage website content such as texts, images, project information and structured content data. Where personal content is stored in Sanity, this only happens to the extent necessary for operating and maintaining the website.
The legal basis is Art. 6(1)(f) GDPR. Where Sanity processes personal data on our behalf, this is done on the basis of a data processing agreement under Art. 28 GDPR where such an agreement is available and concluded.
If you contact us via contact form, email, phone or another channel, we process the data you provide. This may include name, email address, phone number, company, message content, time of contact and technical transmission metadata.
Processing is carried out to handle your inquiry, communicate with you, prepare an offer or initiate or perform a contractual relationship. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
The data is deleted once it is no longer required to process your inquiry, unless statutory retention obligations apply or we have a legitimate interest in further storage.
An appointment booking option via Calendly may be embedded on our website. The provider is Calendly LLC, USA.
If you book an appointment via Calendly or use an embedded Calendly element, personal data may be transmitted to and processed by Calendly. This may include name, email address, phone number, desired appointment, time zone, form information, IP address, browser and device data and technical usage data.
Processing enables simple online appointment booking and appointment management. The legal basis is Art. 6(1)(b) GDPR. Where Calendly processes data when loading the embedded element or uses cookies or similar technologies, this is based on your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG where consent is required.
Our website may contain a button or link that allows you to contact us via WhatsApp. The provider is WhatsApp Ireland Limited or the relevant WhatsApp/Meta entity.
When you click the WhatsApp link, you leave our website and WhatsApp privacy terms apply. Communication via WhatsApp may involve processing of phone number, profile name, message content, communication times, technical metadata and device or usage information.
Use of WhatsApp is voluntary. You can always contact us by email instead. Please do not send particularly sensitive or confidential information via WhatsApp.
This website uses Google Analytics, a web analytics service by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google LLC in the USA.
Google Analytics allows us to analyze website usage. Processed data may include visited pages, time spent, click and usage behavior, approximate location information, technical browser and device information, referrer URL, IP address and cookie or comparable identifiers.
Google Analytics is used only on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without your consent, Google Analytics is not loaded.
With MovaCheck, you can voluntarily check a publicly accessible website address. We process the URL you enter, the derived domain, publicly accessible HTML content of the checked page, technical retrieval data, the automatically generated check result and security/rate-limiting data.
The analysis provides a first assessment of positioning, user guidance, technical basics and trust signals. The legal basis is Art. 6(1)(b) GDPR where you actively request the check, and Art. 6(1)(f) GDPR for security, abuse prevention and technical stability.
Scan results are processed for a short period in external Redis-compatible storage with a regular retention period of 24 hours, unless a different technical configuration applies. Raw HTML from the checked website and complete PageSpeed responses are not stored permanently.
MovaCheck may optionally retrieve PageSpeed Insights data from Google if this feature is technically enabled. In that case, the checked website address is transmitted to Google.
If you request the result by email, we process the contact and consent data you provide to deliver the report. Report delivery requires your explicit consent. Marketing consent is optional and separate from report delivery.
An external email service provider may be used to send MovaCheck emails. TODO: Provider, data processing agreement, region and concrete contractual details must be finally reviewed and documented before production use.
AI-based review is disabled by default in the free MVP. Before AI providers are used productively, provider choice, data processing agreement, data transfers, retention and the specific privacy notices must be reviewed and documented separately.
This website uses Vercel Web Analytics, an analytics service by Vercel.
Vercel Analytics is used for statistical evaluation of website usage and improvement of our online offering. Technical usage data such as visited pages, timestamps, referrer information, approximate location, browser and device data and performance information may be processed.
According to Vercel, Vercel Web Analytics works without cookies and stores only anonymized or aggregated analytics data. The legal basis is Art. 6(1)(f) GDPR unless consent is required.
This website uses the fonts Geist and Geist Mono. The fonts are integrated via Next.js font optimization and delivered locally through our own website domain.
No connection to Google Fonts servers is established when this website is accessed. No personal data is transmitted to Google through the integration of these fonts. The legal basis is Art. 6(1)(f) GDPR.
LinkedIn elements may be embedded on our website, for example a LinkedIn badge or a link to our LinkedIn profile. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
If an active LinkedIn element is loaded, a connection to LinkedIn may be established. IP address, browser and device data, visited page, time of access, cookie information and interactions with the LinkedIn element may be processed.
Active LinkedIn elements are loaded only on the basis of your consent where consent is required. If only a simple link is used, data is processed by LinkedIn only when you click the link.
Our website uses cookies and similar technologies. Some are technically necessary, while others are used for analytics, appointment booking, displaying external content or communication.
Technically necessary cookies and comparable technologies are used to provide the website in a functional, secure and user-friendly manner. Non-essential cookies and comparable technologies are used only after your prior consent.
You can withdraw or change your consent at any time with effect for the future. The relevant settings can be found in the consent banner or cookie settings of this website.
For our services, we offer various payment methods, in particular payment by invoice and bank transfer. For recurring services or fast online payments, payment providers such as Stripe, Mollie or optionally PayPal may be used.
If you use an online payment method, the data required for payment processing is transmitted to the relevant payment provider. This may include name, email address, billing address, payment amount, payment reference, payment status, bank or card data, transaction data, IP address and technical metadata.
Processing is carried out for payment processing and contract performance under Art. 6(1)(b) GDPR and, where applicable, on the basis of legal obligations or legitimate interests.
For accounting, invoicing and tax documentation, we may use software solutions such as lexoffice or sevDesk.
Data processed may include name and address, company data, email address, invoice data, payment data, contract data and tax-relevant information.
Processing is carried out for contract performance and compliance with legal obligations, in particular commercial and tax retention obligations.
If you commission MovaWerk with services such as web design, software development, AI-supported applications, SaaS concepts, CMS setup, hosting setup, consulting, maintenance or training, we process personal data required to prepare, perform and handle the relevant project.
This may include contact data of customers and contact persons, communication data, contract and invoice data, project requirements, technical information, access credentials, provided content and technical logs.
Where we process personal data on behalf of a customer, for example while technically maintaining a website, CMS, contact form or application, this is done on the basis of a data processing agreement under Art. 28 GDPR.
For source code management, technical documentation and project development, we may use services such as GitHub or comparable development tools. GitHub is provided by GitHub, Inc., USA.
When simply visiting our website, no visitor data is actively transmitted by us to GitHub. In customer projects, however, personal data may be processed where necessary for project organization, troubleshooting, technical documentation or collaboration.
The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. When using services outside the EU/EEA, we ensure appropriate safeguards.
MovaWerk develops and uses modern digital solutions, including AI-supported tools. Simply visiting this website does not automatically transmit your personal data to AI providers.
Where AI services are used in a customer project, this is done only to the extent required for the relevant project, expressly agreed or commissioned by the customer. The specific data processing is regulated in the relevant contract or project context.
Please do not send us sensitive personal data or confidential information unless this is necessary for the inquiry or project.
Personal data is transferred only where necessary to provide our website, process your inquiry, enable appointment booking, perform a contract, process payments, comply with legal obligations or protect legitimate interests.
Some service providers we use may be located outside the European Union or the European Economic Area, in particular in the USA.
Where personal data is transferred to third countries, this happens only if the requirements of Art. 44 et seq. GDPR are met, for example through an adequacy decision, standard contractual clauses or other appropriate safeguards.
We store personal data only for as long as required for the respective purposes.
Data from contact inquiries is deleted once the inquiry has been finally processed and no statutory retention obligations or legitimate interests in further storage exist. Contract, invoice and payment data may be stored for statutory retention periods.
We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure.
Our website is provided via an encrypted connection. You can usually recognize an encrypted connection by “https://” in your browser address bar.
Under the GDPR, you have in particular the following rights:
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
The supervisory authority responsible for Baden-Württemberg is: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defense of legal claims.
Where processing is based on your consent, you can withdraw this consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.
This applies in particular to consent for analytics services, external media, appointment booking widgets, LinkedIn elements or comparable services where consent is required.
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website.
We reserve the right to update this privacy policy if our website, services, tools used or legal requirements change. The current version published on this website applies.
