Legal

Privacy Policy

Last updated: August 28, 2026

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

1. Controller

Imen Bouzouita
Mahlower Strasse 14
12049 Berlin
Germany

2. Data We Collect

This site collects only what's needed to respond to enquiries and to operate securely. Depending on how you interact with the site, this may include:

  • Identification data (e.g., name)
  • Contact data (e.g., email address)
  • Usage data (e.g., pages visited, interaction data)
  • Technical data (e.g., IP address, browser type, device information), logged by hosting infrastructure

Specifically: contact form submissions (name, email, message) submitted via the contact form, processed through Formspree; Calendly booking details, handled under Calendly's own privacy policy; technical and connection data (e.g. IP address) processed by Cloudflare, our content delivery, DNS, and security provider, for every visitor as part of operating this site; messages sent to our @imenbouzouita.com address, forwarded via Cloudflare Email Routing; and, only if you accept the cookie banner, usage data collected via Google Analytics (GA4), Contentsquare, and Microsoft Clarity (session recordings and heatmaps). If you use our free Website Checker tool, the URL you submit and the resulting report are cached for up to 15 minutes in Cloudflare KV storage to speed up repeat checks, and your IP address is used the same way as above to prevent abuse; performance checks call Google's PageSpeed Insights API with only the checked URL; and, only if you choose to unlock the full report, your email address is submitted via Formspree and used, via Resend, to send you a one-time copy of that specific report, since that's the deliverable you asked for; if you also tick the optional marketing checkbox next to that email field, that choice is recorded too, and only then may we use your email to send occasional marketing emails, which you can unsubscribe from at any time.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR)
  • Contract performance (Art. 6(1)(b) GDPR)
  • Legal obligation (Art. 6(1)(c) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR)

4. Purpose of Data Processing

Your data is processed for the following purposes:

  • Providing and maintaining our services
  • Responding to enquiries and managing booked calls
  • Improving user experience
  • Ensuring security and preventing fraud
  • Sending marketing communications, only if you've opted in

5. Data Sharing

We do not sell your personal data. It isn't shared with third parties beyond what's required to operate this site, and only:

  • When required by law
  • With service providers under data processing agreements: currently Formspree (contact form processing and Website Checker report unlocks), Calendly (call booking), Cloudflare (content delivery, DNS, security, email forwarding, cookieless web analytics, and the Website Checker's rate limiting and report caching), Google (PageSpeed Insights API, used only within the Website Checker tool), Resend (delivering your Website Checker report copy by email), and, only with your consent, Google Analytics (GA4, usage analytics) and Contentsquare (session recordings and heatmaps)
  • With your explicit consent

6. International Data Transfers

Some of our service providers, including Formspree, Calendly, Cloudflare, Google (Google Analytics and PageSpeed Insights), Resend, Contentsquare, and Microsoft (Clarity), are based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs).

7. Data Retention

We retain personal data only as long as necessary for the purposes stated above or as required by law.

8. Your Rights

Under GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, contact us using our contact form.

9. Cookies

This site uses Google Analytics (GA4), Contentsquare, and Microsoft Clarity (session recordings and heatmaps) to understand how visitors use it. All three are only loaded, and only set cookies, after you actively accept the cookie banner shown on your first visit. No analytics request is made to any of them before that. You can accept, decline, or change your choice at any time via "Cookie settings" in the footer. Separately, Cloudflare, our content delivery and security provider, may set strictly necessary cookies (for example, to detect and block automated abuse) required to operate the site securely. These apply regardless of your cookie banner choice, since they don't require consent under applicable law. This site also uses Cloudflare Web Analytics for aggregate traffic statistics (e.g. page views, referrers, approximate location). It doesn't use cookies, local storage, or any persistent identifier, and doesn't build a profile of individual visitors, so it runs for all visitors without requiring consent. No other tracking or advertising cookies are used.

10. Data Security

We implement appropriate technical and organizational measures to protect your data.

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. As a Berlin-based controller, the competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), or any other competent data protection authority.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page.