Privacy

In short

This site sets no cookies, stores nothing in your browser and embeds no third-party services. I measure how the site is used myself, without Google Analytics (see “Measurement on this site”). There is more on the website check below.

Controller

The controller within the meaning of the GDPR is Carlos Ortiz Liz, sole proprietorship (ditta individuale), Via San Rocco 34, 67030 Vittorito (AQ), Italy, Partita IVA IT02185210669.

Email: carlos.ortizliz@gmail.com, phone and WhatsApp: +49 176 40797122.

Hosting

The site is hosted by Cloudflare. When you visit, Cloudflare processes technically necessary data such as the IP address to deliver the page and protect it from abuse.

Measurement on this site

I want to see how people get to this site and what they do there. A small script of my own does that. It works without Google Analytics, without cookies and without storing anything in your browser.

That includes the page opened with its title and the time, the domain of the page you come from, campaign parameters from the address (utm_ and ref), the kind of device (phone, tablet or laptop), the screen width, your browser language, browser and operating system in rough families, and the country. Also how long the page was open and visible, how far you scrolled, which sections came into view and what you tap, for example WhatsApp, email, phone, a demo, the language switch, the calculator, saving as PDF or starting a website check. With the website check I also note the number of your page view, so I can see where the check came from.

I don’t store your IP address. The server makes a code from it, your browser identifier and a random value that changes every day, and then throws the IP away. The IP can’t be worked out from the code, and after two days the code is worthless, so I can’t recognise you across several days. Cloudflare reads the country from the IP, and only the country is stored. Page views with the same code and at most 30 minutes apart count as one visit. I filter out robots and visits from data centres.

On my own devices I set a marker so that I don’t count myself. That doesn’t happen on yours.

The legal basis is my legitimate interest (Art. 6(1)(f) GDPR) in improving the site. Nothing is stored on your device, which is why I show no cookie notice. I see the figures in a protected area that only I can open. The raw data sits in the database at Supabase (EU) and is deleted after 26 months.

You can object to the measurement. Because I can’t link visits to a person, I can’t find individual visits again. If you don’t want to be counted, block the address /api/besuch of this site in your browser or ad blocker. The site works the same.

Figures from the demos

The server of this site fetches the figures shown with the demos from the demo databases (Supabase, EU) and passes them on without personal data. Your browser only talks to this server.

Links to the demos

The demos are separate websites with their own notices. They run their own analytics without cookies.

Website check

In the website check you enter the address of your website and the name of your business, plus a few optional numbers (type of business, bookings per year, average value of a booking, share through portals, commission rate). The language of the page and, if present, campaign parameters from the address (utm_ and ref) are also stored. The number of the page view the check was started from is stored as well.

My server opens your home page, reads its source code and opens up to two linked booking pages, the robots.txt, the sitemap.xml and the preview image (og:image) of your site. The address also goes to Google PageSpeed Insights, which measures the page once with phone settings and once with laptop settings. What is stored is Google’s measurement result and the analysis of the source code. The screenshots of your home page are image files in Supabase Storage (EU) under a random path, the rest sits in the database (Supabase, EU) under a random identifier. Anyone who knows the link can see the report. Search engines don’t list it.

The legal basis for the check is your request (steps prior to entering into a contract, Art. 6(1)(b) GDPR). To contact you afterwards I need your consent (Art. 6(1)(a) GDPR). You give it with two separate ticks, one for WhatsApp and one for email. Without a tick I don’t store the number or email address concerned, nor your first name.

I delete the report with all its images 48 hours after the check. Checks without consent then disappear completely. With consent, the business, website, your contact details and a small summary of the scores stay until you withdraw it, 2 years at most.

You can withdraw your consent at any time and ask for deletion with a short message to me. The check sets no cookies and stores nothing in your browser. No third-party scripts run in the browser. Google receives only the website address, not your contact details.

Getting in touch

If you write to me, I store your details in order to reply. On request I delete them.

Your rights

Access, correction, deletion, restriction, objection and complaint to a supervisory authority (in Italy: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it). Write to carlos.ortizliz@gmail.com.