Skip to content

Privacy policy

What this website records, what it does not, and who else sees it.

1. An overview

This website sets no cookies and does not follow you across the web. Nothing is stored on your device, there is no cookie banner because there is nothing to consent to, and nothing here can recognise you on another site or tie today’s visit to last week’s.

Four things do happen, and each has its own section below:

  • Our hosting provider records server log files, as every web server does.
  • We count visits with cookie-free analytics that cannot recognise you for longer than 24 hours and cannot match you across sites.
  • If you use the contact form or request beta access, what you write reaches us through a form provider and is stored there until we delete it.
  • These two forms — and only these two pages — run one check that tells a human apart from an automated program.

This policy covers the website keywordwatchr.com. The application at app.keywordwatchr.com processes a great deal more, and it carries its own privacy policy.

2. Hosting

Bunny.net

We use the content delivery network Bunny.net. The provider is BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (hereinafter “Bunny.net”).

Technically, the transfer of information between your browser and this website is routed through that network. This lets us serve the site quickly and reliably. The network records the IP address, which is anonymised.

The use of Bunny.net is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 (1)(f) GDPR).

You can find more information here: https://bunny.net/privacy/.

Data processing. We have concluded a data processing agreement (DPA) for the use of this service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data seriously. We handle your personal data as confidential information and in compliance with the statutory data protection regulations and this policy.

We herewith advise you that the transmission of data over the internet (for instance in e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (the “controller” under the GDPR)

The data processing controller on this website is:

fdmedia GmbH
Altrottstr. 31
69190 Walldorf
Germany

Phone: +49 6227 8991526 (this is not a support line)
E-mail: support@keywordwatchr.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data.

Storage duration

Unless a more specific storage period is named in this policy, your personal data remains with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing it (for example tax or commercial law retention periods); in that case the deletion takes place after these reasons cease to apply.

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1)(a) GDPR, or Art. 9 (2)(a) GDPR if special categories of data are processed. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your end device, the data processing is additionally based on § 25 (1) TDDDG. Consent can be revoked at any time.

If your data is required for the fulfilment of a contract or for pre-contractual measures, we process it on the basis of Art. 6 (1)(b) GDPR. If your data is required for the fulfilment of a legal obligation, we process it on the basis of Art. 6 (1)(c) GDPR. Data processing may furthermore be carried out on the basis of our legitimate interest under Art. 6 (1)(f) GDPR. Information on the relevant legal basis in each individual case is given in the sections of this policy.

Recipients of personal data

In the scope of our business activities we cooperate with external parties. In some cases this requires the transfer of personal data to them. We only disclose personal data to external parties if this is required as part of the fulfilment of a contract, if we are legally obligated to do so, if we have a legitimate interest in the disclosure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits it. When using processors, we only disclose personal data on the basis of a valid data processing agreement.

The external parties involved in this website are named in this policy: Bunny.net (section 2), Pirsch Analytics and Static Forms (section 4) and Cloudflare (section 5).

Many data processing operations are possible only with your express consent. You can revoke consent you have already given at any time. This is without prejudice to the lawfulness of any data processing that occurred before your revocation.

Right to object (Art. 21 GDPR)

IF DATA ARE PROCESSED ON THE BASIS OF ART. 6 (1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS POLICY. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work, or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourse.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients, as well as the purpose of the processing, at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this or any other question about personal data, please contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. You may contact us at any time. The right to demand restriction of processing applies in the following cases:

  • If you dispute the correctness of your data archived by us, we will usually need some time to verify this claim. For the duration of the investigation you have the right to demand that we restrict the processing.
  • If the processing of your personal data was or is conducted unlawfully, you have the option to demand the restriction of processing instead of its eradication.
  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand restriction instead of eradication.
  • If you have raised an objection pursuant to Art. 21 (1) GDPR, your rights and our rights have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing.

If you have restricted the processing of your personal data, these data — with the exception of their archiving — may be processed only subject to your consent, or to claim, exercise or defend legal entitlements, or to protect the rights of other natural persons or legal entities, or for important public interest reasons cited by the European Union or a member state.

SSL and TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser switching from http:// to https:// and by the lock icon in the browser line. If encryption is active, data you transmit to us cannot be read by third parties.

Rejection of unsolicited e-mails

We herewith object to the use of contact information published in conjunction with the mandatory information in our legal disclosure to send us promotional and information material that we have not expressly requested. The operators of this website reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via spam messages.

4. Recording of data on this website

Cookies

This website sets no cookies of its own. It uses no session cookies, no permanent cookies, and no comparable recognition technology. Our analytics work without them. There is consequently no cookie banner, because there is nothing to consent to.

One exception exists on two pages: the check on the contact form and on the beta request form (see “Cloudflare Turnstile” below) may store cookies or comparable information on your device. It is loaded only on /contact/ and /beta/, and only when one of these pages is opened.

Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser communicates automatically. The information comprises:

  • the type and version of browser used
  • the operating system used
  • the referrer URL
  • the hostname of the accessing computer
  • the time of the server request
  • the IP address

This data is not merged with other data sources. It is recorded on the basis of Art. 6 (1)(f) GDPR. The operator of the website has a legitimate interest in the technically error-free depiction and the optimisation of the website, and server log files must be recorded to achieve this.

Pirsch Analytics

We use “Pirsch Analytics” on this website. The provider is Emvi Software GmbH, Nickelstraße 1b, 33378 Rheda-Wiedenbrück, Germany (hereinafter “Pirsch”). The data is processed exclusively on servers in Germany.

The Pirsch script and the data it sends run through pa.keywordwatchr.com, a subdomain of this website that points to Pirsch’s servers. It is Pirsch that receives the data, in the same way as through Pirsch’s own address.

For web analytics, we use Pirsch Analytics. Pirsch Analytics is a cookie-free web analytics software that was developed according to the Privacy by Design principle. To analyze visitor flows, Pirsch Analytics uses a hashing algorithm to generate a 16-digit number as the visitor ID when the page request is received. The input values are the IP address, the user agent, the date and a salt.

The visitor’s IP address is not persisted in whole or in part, and is anonymized completely and non-reversibly by the hash. The inclusion of the date and the use of one salt per website ensures that website visitors cannot be recognized for more than 24 hours and cannot be tracked across multiple websites. A rough localization (country/city) is performed via a locally integrated database.

Beyond the visitor ID, the following is recorded: the page visited (the path, not the full URL), the referrer, UTM parameters, the browser language, the time of the visit, the browser and operating system, the device type, the screen size, and the approximate location. The IP address itself is never stored.

This analysis is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the statistical analysis of user behaviour in order to improve the website. Because Pirsch Analytics stores no information on your device and reads none from it, no consent is required for its use under § 25 TDDDG — which is why this website has no cookie banner.

You can find more information about Pirsch Analytics here: https://pirsch.io/privacy.

Data processing. We have concluded a data processing agreement (DPA) for the use of this service.

Contact form

If you submit an inquiry via our contact form, the information you provide in it — your name, e-mail address, subject, topic and message — is stored in order to handle your inquiry and in the event that we have further questions. We do not share this information without your consent.

The processing of this data is based on Art. 6 (1)(b) GDPR if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 (1)(f) GDPR), or on your consent (Art. 6 (1)(a) GDPR), which you give by ticking the box on the form; that consent can be revoked at any time.

The information you enter remains with us until you ask us to delete it, until you revoke your consent, or until the purpose for which it was stored no longer exists — for instance after we have concluded our response. Mandatory legal provisions, in particular retention periods, remain unaffected.

Beta request form

If you request access to the KeywordWatchr beta via the form on /beta/, the information you provide in it — your name, your e-mail address, what you would like to watch and, if you enter it, your website or company — is stored in order to assess your request and to send you an invitation. We do not share this information without your consent.

The processing of this data is based on Art. 6 (1)(b) GDPR, as it is necessary to carry out pre-contractual measures at your request, and on your consent (Art. 6 (1)(a) GDPR), which you give by ticking the box on the form; that consent can be revoked at any time.

The information you enter remains with us until you ask us to delete it, until you revoke your consent, or until the purpose for which it was stored no longer exists — for instance once your request has been answered and the beta phase has ended. Mandatory legal provisions, in particular retention periods, remain unaffected.

The beta request form uses the same provider and the same check as the contact form, described in the next section and under “Cloudflare Turnstile”.

Static Forms

This website is static and has no server of its own that could accept a form submission. The contact form and the beta request form are therefore delivered by an external provider: Static Forms, operated by Qualascend (hereinafter “Static Forms”). Contact: info@staticforms.dev.

When you send the form, the data you entered is transmitted to Static Forms, forwarded to our mailbox and additionally stored as a record in our account there, where we can read, export and delete it. Static Forms operates its service on infrastructure provided by Amazon Web Services and Vercel.

Static Forms processes this data on our behalf and on our instructions (Art. 28 GDPR). Data may be transferred to and processed in the United States; these transfers are covered by the Standard Contractual Clauses of the European Commission.

You can find more information here: https://www.staticforms.dev/privacy-policy.

Data processing. We have concluded a data processing agreement (DPA) for the use of this service.

If you would rather not use the form, you can write to support@keywordwatchr.com instead. The message then reaches the same mailbox without passing through Static Forms.

Inquiries by e-mail or telephone

If you contact us by e-mail or telephone, your request including all resulting personal data (name, request) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6 (1)(b) GDPR if your inquiry is related to the fulfilment of a contract or is required for pre-contractual measures. In all other cases it is processed on the basis of our legitimate interest in the effective handling of inquiries (Art. 6 (1)(f) GDPR), or on the basis of your consent (Art. 6 (1)(a) GDPR) where it has been obtained; consent can be revoked at any time.

The data remains with us until you ask us to delete it, until you revoke your consent, or until the purpose for storing it lapses. Mandatory legal provisions, in particular statutory retention periods, remain unaffected.

5. Tools

Cloudflare Turnstile

We use “Cloudflare Turnstile” on the contact page and on the beta request page of this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Turnstile”).

Turnstile checks whether the data entered on this website is submitted by a human or by an automated program. For this purpose it evaluates various information about the visitor, for example the IP address, the time spent on the page, or mouse movements. The data collected during the analysis is forwarded to Cloudflare.

Turnstile runs on the contact page and the beta request page and nowhere else. It is not loaded when you visit any other page of this website.

The storage and analysis of the data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in protecting the website against abusive automated access and spam. Where consent has been obtained, the data is processed exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device. Such consent may be revoked at any time.

The processing of data is based on Standard Contractual Clauses, which you can find here: https://www.cloudflare.com/cloudflare-customer-scc/.

Cloudflare is certified under the “EU-US Data Privacy Framework” (DPF), an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the US. Further information: https://www.dataprivacyframework.gov/participant/5666.

For more information on Turnstile, see https://www.cloudflare.com/cloudflare-customer-dpa/.

Fonts (local embedding)

This website uses the Geist typeface to ensure a uniform appearance. The fonts are installed locally on our own server. No connection to a font provider’s servers is established, and no request leaves your browser for that purpose. Your IP address is not transmitted to any third party for the loading of fonts.