Privacy policy

Data controller

Tayfun Cetinkaya Fotografie UG
Erkrather Str. 401
40231 Düsseldorf
Germany

Managing director: Tayfun Cetinkaya
info@werb.agency
+49 1516 8514067

Website delivery and infrastructure

This website is hosted through OpenAI’s ChatGPT Sites using Cloudflare infrastructure. Visiting the site involves processing technical connection data, including your IP address, requested page, time of access, browser and device information and, where available, the referring page. These data support content delivery, troubleshooting and abuse prevention.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a secure, functioning website. Recipients include the hosting and infrastructure providers. Technical logs are processed under the providers’ operational, security and retention rules; WERB does not create personal visitor profiles.

The providers may process data outside the European Economic Area, including in the United States. Their privacy notices explain the relevant transfers, safeguards and retention criteria: OpenAI · Cloudflare. These include standard contractual clauses and, where applicable, adequacy decisions.

Contact by project form, email or telephone

If you contact us, we process your contact details, the content of your message and related communication data to respond to your enquiry. Our email service is provided by IONOS. The project form collects your name, email address, message and, optionally, your company, together with the submission time, language and source page. These details are stored in the protected administration area and used only to handle your enquiry. Alternatively, email links open your own email application.

Contract-related enquiries are processed under Article 6(1)(b) GDPR. Other enquiries are processed under our legitimate interest in responding, Article 6(1)(f) GDPR. We retain correspondence for as long as needed for the enquiry, any resulting business relationship or statutory obligations. Legally required retention is based on Article 6(1)(c) GDPR.

Contacting us is voluntary. Without the necessary contact information, we may be unable to respond.

Cookies, media and external links

The pages implemented by WERB include no advertising trackers and set no analytics cookies. Language selection uses links. Images, uploaded videos and fonts are served with the website. Some videos may use Vimeo. The Vimeo player loads only after you activate it using its button. Loading sends technical connection data, including your IP address, browser information and referring page, to Vimeo. The player uses its Do Not Track setting; essential cookies and existing Vimeo cookies may still be used. See the Vimeo privacy policy for further information. There are no social media plugins.

Technical processing by the hosting infrastructure is described above. If you follow an external link, the destination website’s privacy information applies to that visit.

Usage statistics and unique visitors

WERB counts page views, language switches and email-link clicks as daily totals. To count unique visitors, the server converts the IP address into a pseudonymous code using a secret key (HMAC). The original IP address is not stored in the statistics tables. Only the code and visit day are stored separately, without linking them to pages viewed, names, email addresses or project enquiries. The same IP code counts once within the selected period. Shared internet connections and changing IP addresses can affect the count.

No analytics cookies or visitor identifiers are stored in the browser. Do Not Track and Global Privacy Control signals are respected. The codes support 7, 30 and 90-day reports and comparison with the preceding period. Codes outside the most recent 180 calendar days and daily totals outside the most recent 400 calendar days are removed when the next measurement is recorded. Language distribution is based on page views; language switches are counted separately. The administration panel displays totals only. Technical connection data processed by hosting providers are described above.

Protected administration area

The administration area is reserved for authorised users. Sign-in is provided by ChatGPT or by an authorised email address and password. A user identifier and email address are processed for access control. Password sign-in uses a necessary, protected session cookie lasting twelve hours; the server stores only a hash of the random session identifier. Signing out or changing the credentials invalidates these sessions. To limit repeated sign-in attempts, pseudonymised connection identifiers and attempt counters are processed temporarily; expired records are deleted on a subsequent sign-in attempt. ChatGPT manages the sessions for its own sign-in method. Content changes, uploaded media and earlier publications are stored to operate the website and allow changes to be traced or restored. This relies on our legitimate interest in secure administration under Article 6(1)(f) GDPR. Public visitors do not need to sign in.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction of processing and data portability. If you have given consent, you may withdraw it for the future.

Right to object: You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR).

To exercise your rights, contact info@werb.agency. You may also complain to a data protection authority, particularly where you live, work or believe an infringement occurred. In North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

WERB does not use automated decision-making or profiling on this website.