Privacy policy

Daniel Wilhelm
Schneidemühler Str. 20D
76139 Karlsruhe, Germany
Phone: +49 152 53514221
Email: dwilhelm@medawi.de

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the website, Vercel processes technically necessary server log data: IP address, date and time of access, pages requested, and browser and device information.

Processing is based on Art. 6 (1) (f) GDPR. My legitimate interest is the secure and reliable operation of the website. A data processing agreement (Art. 28 GDPR) is in place with Vercel; transfers to the USA are safeguarded by the EU standard contractual clauses. Log data is stored only as long as required for operation and security.

Details: vercel.com/legal/privacy-policy

The form on the contact page is technically transmitted via Google Forms, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). The data transmitted is what you enter into the form: name, email address and, optionally, company, phone number, existing website and your request.

Processing serves to handle your enquiry and to carry out pre-contractual steps (Art. 6 (1) (b) GDPR). Google is certified under the EU-US Data Privacy Framework. Your details are deleted as soon as they are no longer required for processing and no statutory retention obligations apply.

Details: policies.google.com/privacy

I run ads via Google Ads and use conversion tracking by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). It measures whether visitors who arrive on this website via an ad submit the contact form. Cookies are set and usage data (e.g. IP address and click identifier) is transmitted to Google; data may be transferred to the USA.

Tracking only runs if you consent in the cookie banner (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Without consent, no Google scripts are loaded and no cookies are set. Google is certified under the EU-US Data Privacy Framework. You can withdraw or re-grant your consent at any time with effect for the future:

Change cookie settings

Details: policies.google.com/privacy

I run ads on Facebook and Instagram using the Meta pixel and the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (parent company: Meta Platforms, Inc., USA). It measures whether visitors arriving from an ad start the questionnaire, submit it and book an appointment. Cookies are set and usage data is transmitted to Meta: IP address, browser identifier, click identifier as well as your email address and phone number in hashed form (SHA-256), so that Meta can attribute the conversion to your click. Data may be transferred to the USA.

Some of these reports are not sent from your browser but from my server (Conversions API). This server-side transmission likewise only takes place if you consented in the cookie banner; if you decline, no pixel is loaded and no report is sent to Meta.

The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Meta and I are joint controllers for the collection and transmission of this data (Art. 26 GDPR); Meta is solely responsible for any further processing. Meta is certified under the EU-US Data Privacy Framework.

Details: facebook.com/privacy/policy

The questionnaire on the page “Deine neue Website” is part of this website; no external form provider is involved. When you submit it, your answers and contact details (name, business and town, email address, phone number and, optionally, your message) are transmitted to and stored in my internal customer records system. That system also runs on Vercel, in the Frankfurt am Main data centre; the database is operated by Neon Inc. (USA) in a data centre in Frankfurt am Main.

I use the details to prepare your enquiry, to call you or contact you by email, and to send you the booking confirmation and reminders (Art. 6 (1) (b) GDPR). I send these emails via Google Workspace from Google Ireland Limited. Your details are deleted as soon as they are no longer required and no statutory retention obligations apply.

When the page loads, it also transmits a random session identifier, the origin of your visit (ad parameters such as campaign and ad), the page visited and the referring page, and your cookie decision to my system, so that I can attribute your enquiry to the ad you came from (Art. 6 (1) (f) GDPR). IP address, browser identifier and Meta's identifiers are only stored if you consented in the cookie banner.

After the questionnaire you can book an initial call via an appointment schedule in Google Calendar, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google processes your name, email address and chosen time and creates the appointment with a Google Meet link in my calendar (Art. 6 (1) (b) GDPR). My customer records system matches the booking to your questionnaire via your email address so that I can prepare for the call and send you the confirmation and reminders. Google is certified under the EU-US Data Privacy Framework.

Details: policies.google.com/privacy

To improve the questionnaire, I count how far visitors get in it: which step was shown, answered, gone back from or abandoned, whether the booking page was opened, whether a phone or a computer was used, and which ad the visit came from (ad parameters). For this the page creates a random identifier in the storage of the open tab (sessionStorage), which disappears when the tab is closed. Neither your IP address nor your browser identifier, your answers or your contact details are stored, and the count is not linked to your enquiry. The figures are kept in my customer records system (Vercel, Neon, both Frankfurt am Main) and are only evaluated in aggregate (Art. 6 (1) (f) GDPR; my legitimate interest is making the questionnaire easier to understand).

If you call or write to me, I process your contact details and the content of your message in order to answer your enquiry (Art. 6 (1) (b) GDPR; for general enquiries Art. 6 (1) (f) GDPR). The data is deleted as soon as it is no longer needed to handle your request.

Only technically necessary settings are stored without consent: your language choice, your colour scheme (light/dark) and your cookie decision itself (Section 25 (2) TDDDG). While you fill in the questionnaire, your browser keeps your progress, the random session identifier and the identifier for the anonymous count in the storage of the open tab (sessionStorage); all of it disappears when you close the tab. Google Ads and Meta marketing cookies are only set if you consent in the cookie banner — see the sections above.

The website links to external services, for example LinkedIn and websites of reference clients. When you click such a link, the privacy policy of the respective provider applies.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You may withdraw any consent you have given at any time with effect for the future (Art. 7 (3)).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Version: September 2026. I will update this policy whenever the website or the legal situation changes.