Privacy
Controller
Volkan Akbulut trading as ryzeon, Querenburger Str. 30A, 44789 Bochum, Germany. Privacy enquiries: agency@ryzeon.de, +49 234 54508315.
Enquiries and appointments
We process your first and last name, email or phone, enquiry, selected service, optional budget and requested appointment. The purpose is to respond and prepare a potential engagement. The legal basis is GDPR Article 6(1)(b) for your precontractual enquiry, otherwise Article 6(1)(f) for business communication. Contact details are necessary to reply. A requested appointment is not a confirmed booking.
Hosting, email and recipients
The website and first-party enquiry CRM run on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Email is processed through IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Recipients are authorised RYZEON personnel and necessary hosting and communications providers. GDPR Article 6(1)(f) supports secure operations and business communication; Article 6(1)(b) applies to your own precontractual enquiries. Enquiry data is not sent to AI models.
Retention and protection
Access is restricted and transmission is encrypted. Administrator sessions expire after eight hours. Unsuccessful enquiries are reviewed for erasure six months after the last substantive contact and deleted unless a continuing need is documented. Legal duties or specific legal claims can require longer retention. Local backups have restricted access; erasure requests also address remaining backup copies.
Newsletter consent
Newsletter subscription is voluntary and separate from enquiries under GDPR Article 6(1)(a). A separate email confirmation activates it. Subscription, confirmation and withdrawal are documented with time and notice context. Withdraw prospectively via the unsubscribe link or agency@ryzeon.de. We do not track newsletter opens or clicks.
Website check and Cloudflare Turnstile
The check retrieves only public HTML from a website you are authorised to submit. Do not include credentials or personal data in URLs. Turnstile loads when protected forms are used. Cloudflare, Inc. processes IP addresses, browser and connection signals and origin to detect bots. It acts as processor for website protection and, under its policy, as controller to improve detection. Required abuse prevention relies on GDPR Article 6(1)(f). Device access requires a separate assessment under section 25 TDDDG. Processing outside the EEA is possible and requires documented Chapter V safeguards.
Cookies and Google Analytics 4
On the public website we use Google Analytics 4 from Google Ireland Limited only after voluntary consent (GDPR Article 6(1)(a) and section 25(1) TDDDG). We measure page visits, usage, successful enquiry, appointment, website-check and newsletter steps, and clicks on call buttons. A click is not evidence of a completed call. Google processes pseudonymous cookie identifiers, timestamps, page paths, browser, device and connection-derived location information; your IP address is transmitted to Google to establish the connection. We do not send form contents, names, email addresses, phone numbers, our own user IDs, URL query parameters, fragments or referrers to Analytics. Enhanced Measurement, Google Signals and personalised advertising are disabled for this integration. Before consent, no Analytics script or measurement request is loaded or sent. Cookies _ga and _ga_6RJ253Q4T3 are configured for a maximum of 180 days without automatic renewal. ryzeon_consent stores your choice for 180 days without our own user ID; the necessary admin session ryzeon_session lasts no more than eight hours (section 25(2)(2) TDDDG; GDPR Article 6(1)(f)). Analytics retention is configured to two months for event data and 14 months for user data; new activity resets the user retention period. Aggregated standard reports are not fully covered by these limits. Google LLC may also process data in the USA. The accepted Google data-processing terms govern international transfers, including standard contractual clauses where applicable; current transfer safeguards are linked below. Withdraw consent prospectively at any time through Privacy settings in the footer. We then stop measurement and delete accessible Analytics cookies. This does not retroactively erase data lawfully processed earlier. Fonts are served locally; Google Search Console is not visitor tracking.
Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing based on your particular situation and withdraw consent prospectively. You may complain to a supervisory authority, including the data protection authority of North Rhine-Westphalia.
IP / Language
At the entry URL we map the connection IP to a country locally to suggest a language (GDPR Article 6(1)(f), user-friendly operation). A local DB-IP Lite database is used. No visitor-IP request is sent to DB-IP, no precise location is determined and the result is not separately stored. VPNs can affect accuracy. Explicit language URLs are never overridden.
Connection data and location
The verified server location is Nuremberg, Germany. General Nginx access logging is disabled for this site. Error logs may contain IP, time and requested URL and follow daily rotation with 14 archives. Security and processing events are recorded in the protected CRM for troubleshooting, abuse prevention and accountability under GDPR Article 6(1)(f), not advertising profiles.
Appearance preference
Without a manual choice, the site follows your system appearance. Choosing Light or Dark stores this requested preference locally in your browser as ryzeon_theme_v1 for up to 180 days, without a user identifier or transmission to us or third parties. It applies across pages and languages on this website origin. Choosing System removes the stored preference. Necessary device storage is based on section 25(2)(2) TDDDG.
Contact via WhatsApp
You may voluntarily contact us on WhatsApp at +49 1551 0605710. This website provides only an external link, not a WhatsApp widget or SDK; we send no data to WhatsApp through it before you click. Opening it is subject to WhatsApp’s terms and privacy policy; the European-region provider is WhatsApp Ireland Limited. Phone, profile, device and connection information may be processed, including transfers outside the EEA. We use messages and contact details you send to answer your enquiry (GDPR Article 6(1)(b) for your own pre-contractual request, otherwise 6(1)(f) for requested communication). This does not subscribe you to a newsletter. Please do not send confidential documents or particularly sensitive data in this initial contact. Email, telephone and the enquiry form are equivalent alternatives. Our retention and deletion periods for enquiries stated above apply.