Privacy policy
SEODA.de – Last updated: October 30, 2026
1. Data Controller
The controller responsible for processing personal data through this website is:
Fahrettin Tireki
SEODA.de – Sole Proprietorship
Bismarckstraße 26
73054 Eislingen
Germany
Email: info@seoda.de
Website: https://seoda.de
For privacy-related enquiries and requests concerning your personal data, please contact us using the email address above.
2. General Information About Data Processing
We process personal data in accordance with applicable data protection legislation, particularly the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data means information relating to an identified or identifiable natural person.
We process personal data in particular to:
provide and secure our website;
create and manage user accounts;
perform domain and website analyses;
provide paid services and subscriptions;
operate marketplace functions;
prevent fraud, spam and automated attacks;
respond to enquiries;
comply with legal obligations.
Depending on the purpose, processing is based on:
Article 6(1)(a) GDPR: consent;
Article 6(1)(b) GDPR: performance of a contract or pre-contractual measures;
Article 6(1)(c) GDPR: compliance with legal obligations;
Article 6(1)(f) GDPR: legitimate interests, particularly website security, fraud prevention and reliable operation.
Where processing is based on legitimate interests, we take the rights and interests of affected individuals into account.
3. Hosting and Server Operation
Our website is hosted on a virtual private server (VPS) provided by Contabo.
Provider:
Contabo GmbH
Germany
https://contabo.com
The server is administered using KeyHelp server management software.
KeyHelp is used to manage hosting, domains, databases, email services and server configurations. Using server management software installed on our own server does not automatically mean that all visitor information is transferred to the software manufacturer.
The following technical information may be processed when you visit our website:
IP address;
date and time of access;
requested URL;
HTTP status code;
amount of transferred data;
browser and device information where transmitted;
referrer information where provided;
security-related technical events.
Processing is necessary for website delivery, troubleshooting, attack detection and system security.
Legal basis: Article 6(1)(f) GDPR and, where required to perform a contract, Article 6(1)(b) GDPR.
Server logs are deleted or anonymised when no longer necessary for their purpose, unless another lawful basis requires further retention.
To be completed before publication: Actual server location and specific retention periods for access and error logs.
4. Encrypted Data Transmission
Our website uses HTTPS/TLS encryption to protect communication between your browser and our server.
Encryption helps prevent unauthorised interception and modification of data during transmission.
However, an encrypted connection cannot guarantee protection against every security risk.
We apply appropriate technical and organisational security measures in accordance with applicable legal requirements.
5. Cookies and Local Browser Storage
According to our current technical configuration, SEODA uses cookies and browser storage mechanisms intended for essential website functions.
These include:
Session cookies: Maintain authentication and user sessions.
Security and CSRF protection: Protect forms and authenticated actions against unauthorised requests.
Language preferences: Remember the language selected by the visitor.
Currency preferences: Remember the selected display currency.
Appearance preferences: Remember light mode, dark mode or the device's preferred appearance.
Under Section 25(2) of the German TDDDG, consent is not required for storage or access that is strictly necessary to provide a digital service explicitly requested by the user.
Where personal data is involved, processing is generally based on Article 6(1)(b) or (f) GDPR, as applicable.
Retention depends on the purpose and actual configuration. Session cookies may expire when a session ends, while actively selected preferences may be retained for longer.
To be completed before publication: Actual cookie and local storage names, providers and retention periods.
Where only strictly necessary storage or access occurs, a cookie consent banner is not generally required.
Should optional analytics, advertising or tracking technologies be introduced, any legally required prior consent will be obtained.
6. Protection Against Automated Access – Cloudflare Turnstile
We use Cloudflare Turnstile to protect forms, user accounts and other functions against spam, automated submissions and abusive activity.
Provider: Cloudflare, Inc., United States.
Depending on its configuration, the service may process:
IP addresses and connection information;
browser and device characteristics;
technical interaction and verification data;
security tokens;
information used to distinguish automated access from legitimate activity.
The purpose is to maintain security and prevent abuse.
Legal basis: Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and reliable website.
Where Turnstile stores or accesses information on a visitor's device, Section 25 TDDDG must also be considered. Whether consent is necessary depends on the implementation and whether the relevant processing is strictly necessary.
If pre-clearance is enabled, Cloudflare may set a security cookie named cf_clearance.
Personal data may be transferred to the United States or other countries. Such transfers must comply with the applicable international data transfer requirements.
Further information:
https://www.cloudflare.com/privacypolicy/
7. Domain, SEO and Website Analyses
SEODA provides technical analysis of publicly accessible domains and websites.
Depending on the requested service, the following information may be processed:
submitted domains and URLs;
DNS and domain registration information;
HTTP and HTTPS responses;
TLS certificate details;
security-related HTTP headers;
page titles and metadata;
robots.txt and sitemap information;
loading times and performance metrics;
technical SEO characteristics;
results supplied by external analysis providers.
These data are processed to perform the analysis requested by the user.
Legal basis: Article 6(1)(b) GDPR where the analysis relates to a contract or pre-contractual request; otherwise Article 6(1)(f) GDPR for providing the requested analysis function.
Public domain and registration information may sometimes contain personal data. Public accessibility does not automatically remove data protection obligations.
Results may be cached to reduce repeated requests and make analysis results available.
The 24-hour refresh period described on SEODA does not necessarily mean that all analysis records and logs are deleted after 24 hours.
To be completed before publication: Actual deletion periods and whether analysis results are publicly displayed or indexed by search engines.
8. Google PageSpeed Insights API
We use the Google PageSpeed Insights API to evaluate website performance and technical optimisation opportunities.
Provider: Google.
When an analysis is requested, the public website URL may be transmitted to Google.
Google performs the analysis and returns technical performance measurements and recommendations.
Our API key is used for authentication and management of API requests.
When the API is accessed through our server, the connection originates from SEODA's server IP address. Whether additional visitor information is transferred directly to Google depends on the actual technical implementation.
Legal basis: Article 6(1)(b) GDPR for contractual or pre-contractual analyses, or Article 6(1)(f) GDPR where applicable.
Processing outside the European Economic Area cannot be categorically excluded.
Further information:
https://policies.google.com/privacy
https://developers.google.com/speed/docs/insights/v5/get-started
9. Open PageRank API
We may use the Open PageRank API provided through Keywords Everywhere to analyse public domain authority and linking indicators.
For a relevant request, the domain or hostname being analysed is transmitted to the API service.
The service may return:
domain authority scores;
global ranking information;
referring-domain indicators;
historical scoring data;
the date of the underlying measurement.
These values are technical or statistical indicators, not personal credit assessments or binding financial valuations.
For a server-side integration, the API request is made through our server infrastructure. Whether visitor information is transmitted depends on the actual implementation.
Legal basis: Article 6(1)(b) or (f) GDPR, where personal data is involved.
Further information:
https://openpagerank.keywordseverywhere.com/privacy
10. User Accounts and Registration
When you register and use a customer account, we may process:
name or username, where provided;
email address;
securely hashed password credentials;
account status;
registration date;
selected preferences;
purchased services;
security-related login information.
Processing is required for account creation, authentication, account management and service provision.
Legal basis: Article 6(1)(b) GDPR.
Security-related information may also be processed under Article 6(1)(f) GDPR.
After an account is closed, personal data will be deleted or anonymised unless legal retention obligations, outstanding transactions or another lawful basis require continued storage.
11. Marketplace and Sales Listings
Where marketplace functions are available, we may process:
seller names and profile information;
contact information;
project descriptions;
domains and website addresses;
asking prices;
revenue and profit information;
visitor and usage statistics;
images and uploaded documents;
ownership and authorisation evidence;
purchase enquiries and communications.
Public listings may contain information that sellers have designated for publication.
Confidential financial records and verification documents should only be accessible to appropriately authorised parties.
Legal basis: Article 6(1)(b) GDPR for marketplace services and Article 6(1)(f) GDPR for proportionate fraud prevention.
Additional identity or business verification may be required where legally applicable.
12. Paid Services and Payment Processing
For paid analyses, valuation reports, verification services, promoted listings and subscriptions, SEODA offers Stripe and PayPal, depending on the checkout process.
Information processed may include:
name and billing information;
email address;
amount and currency;
purchased service;
order and transaction identifiers;
payment status;
refunds and payment disputes.
Legal basis: Article 6(1)(b) GDPR for contractual processing and Article 6(1)(c) GDPR for applicable accounting and tax obligations.
Article 6(1)(f) GDPR may also apply to proportionate payment fraud prevention.
Stripe
Privacy information:
PayPal
Privacy information:
https://www.paypal.com/de/legalhub/paypal/privacy-full
When you are redirected to a payment provider's website, that provider's own privacy and cookie policies apply there.
Information needed to prepare and process a payment may already be transferred to the provider before the redirect.
SEODA does not store complete payment card details where those details are collected directly and exclusively by the payment provider.
13. Subscriptions and Contract Administration
For paid subscriptions, we process the information needed to manage the contract, including:
subscription plan;
billing interval;
subscription start and end dates;
renewal and cancellation status;
invoices and payment records;
usage limits and entitlements.
Legal basis: Articles 6(1)(b) and 6(1)(c) GDPR.
Data is retained for the duration of the contractual relationship and subsequently only where required or otherwise permitted by law.
14. Contact and Customer Support
If you contact us by email or through a contact form, we process the information you provide to respond to your enquiry.
This may include your name, email address and message.
Legal basis: Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, and otherwise Article 6(1)(f) GDPR for handling correspondence.
Data will be deleted when no longer necessary, subject to legal retention requirements and other applicable lawful grounds.
15. Newsletters and Promotional Emails
Where SEODA offers newsletters, promotional communications are generally sent on an appropriate legal basis, particularly prior consent.
The following information may be processed:
email address;
subscription date;
confirmation date;
technical records demonstrating consent;
selected topics or language, where applicable.
A double opt-in process may be used to verify registrations.
Legal basis: Article 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future, for example using the unsubscribe link in a newsletter.
Records necessary to demonstrate consent or withdrawal may be retained for as long as legally justified.
If an external email delivery provider is introduced, its identity, role and any international data transfers must be added to this Privacy Policy.
16. Retention and Deletion
We retain personal data only for as long as necessary for the relevant purpose, subject to applicable legal obligations.
We distinguish between:
session data;
server and security logs;
analysis results;
customer accounts;
contractual and payment records;
marketplace and verification documents;
contact enquiries;
newsletter consent records.
Statutory tax and commercial record retention requirements may apply.
Data is deleted or anonymised once the applicable period ends unless another lawful reason requires further processing.
To be completed before publication: Specific retention periods or verifiable deletion criteria for server logs, analysis results, accounts, marketplace records, backups and enquiries.
17. Recipients and International Data Transfers
We disclose personal data only where necessary and legally permitted.
Recipients may include:
hosting and infrastructure providers;
security service providers;
payment processors;
technical analysis providers;
email service providers, where applicable;
competent public authorities;
authorised transaction parties within the marketplace.
International providers may process data outside the European Economic Area.
Such transfers must comply with Articles 44 et seq. GDPR, for example through an applicable adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses.
Information on the applicable safeguards may be requested at info@seoda.de.
18. Your Data Protection Rights
Subject to applicable legal requirements, you have the following rights:
Access: Article 15 GDPR;
Rectification: Article 16 GDPR;
Erasure: Article 17 GDPR;
Restriction of processing: Article 18 GDPR;
Data portability: Article 20 GDPR;
Objection: Article 21 GDPR;
Withdrawal of consent: Article 7(3) GDPR;
Complaint to a supervisory authority: Article 77 GDPR.
Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
For requests, contact:
Relevant supervisory authority in Baden-Württemberg:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
https://www.baden-wuerttemberg.datenschutz.de
19. Automated Processing and Valuations
SEODA uses automated methods to analyse technical characteristics of domains and websites.
These processes may produce technical scores, risk indicators and non-binding valuations.
A technical domain valuation does not automatically constitute a solely automated decision under Article 22 GDPR that produces legal or similarly significant effects concerning a natural person.
If such decision-making systems are introduced in the future, the legally required information and safeguards will be provided separately.
20. Provision of Personal Data
Certain personal data is necessary to register, process an enquiry or perform a contract.
If essential information is not provided, some services may be unavailable.
According to the currently described service, free public domain analyses can generally be requested without creating an account.
21. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technologies or legal obligations change.
The latest version will be published on SEODA.de.
Where material changes require additional information or consent, we will comply with the applicable legal requirements.