DEFree call

Privacy Policy

This is a translation. The German version is legally binding.

1. General information

This privacy policy explains which personal data we process when you visit our website klaw.agency or contact us, for what purpose and on what legal basis. Personal data is any data that can identify you personally. We process your data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller

The controller responsible for data processing on this website is:

Maxim Mam Biram Konare
Klaw
Goeckestr. 34c
13055 Berlin
Germany
Phone: +49 163 1766232
Email: info@klaw.agency

We have not appointed a data protection officer, as there is no legal obligation to do so.

3. Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA ("Netlify") and delivered through its worldwide content delivery network.

Each time you visit our website, Netlify automatically records information sent by your browser and stores it in server log files. This includes in particular:

  • IP address of the requesting device
  • date and time of the request
  • page or file requested
  • referrer URL (the previously visited page)
  • browser and operating system used (user agent)
  • approximate location (country), derived from the IP address

This data is technically necessary to deliver the website, keep it stable and secure, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. We do not combine this data with other data sources. To our knowledge, Netlify usually deletes the log files after less than 30 days.

We have concluded a data processing agreement with Netlify (Art. 28 GDPR). Netlify also processes data in the USA. Netlify is certified under the EU-US Data Privacy Framework, so the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). More information: https://www.netlify.com/privacy/

4. Contact form and appointment requests

When you write to us via the contact form or the appointment request, we process the data you enter (e.g. name, email address, phone number, company, preferred date, your message) to answer your request and, where applicable, to prepare an offer.

The forms are transmitted and stored via Netlify Forms, a service of Netlify (see section 3). For spam protection, Netlify also stores the IP address and browser information. For processing in the USA, the information in section 3 applies (data processing agreement, EU-US Data Privacy Framework). We are notified of new requests by email (see section 5).

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps. In all other cases, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is answering requests sent to us. Spam protection is based on Art. 6(1)(f) GDPR.

Providing your data is voluntary. Without contact details, however, we cannot answer your request.

We delete your request once it has been fully handled and no contract is concluded, at the latest after six months. If a contract is concluded, we keep the data for as long as statutory retention obligations require (see section 11).

5. Contact by email and phone

If you contact us by email or phone, we process the information you provide (e.g. name, email address, phone number, content of your request) to handle your request. Legal bases and storage period are the same as in section 4.

We use Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for our email. Emails you send us and notifications about requests from our forms are stored there. We have concluded a data processing agreement with Google (Cloud Data Processing Addendum). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). In addition, Google has agreed to the European Commission's standard contractual clauses (Art. 46 GDPR).

6. Contact via WhatsApp

Our website contains a link you can use to message us on WhatsApp. It is a simple link: no data is sent to WhatsApp when our website loads. You are only redirected to WhatsApp when you click the link. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a Meta group company. Data may also be transferred to the USA.

If you message us on WhatsApp, we process your phone number, your name and your messages to handle your request. Legal bases and storage period are the same as in section 4. WhatsApp's own processing is governed by its privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

If you do not want this, please use the contact form, email or phone instead.

After an appointment request, we show you a link to add the appointment to your Google Calendar. This is also a simple link. Data is only sent to Google when you click it. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's privacy policy: https://policies.google.com/privacy

8. Web analytics with Plausible Analytics

We use Plausible Analytics to understand how our website is used (e.g. page views, where visitors come from, clicks on buttons). The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Data is processed and stored exclusively in the EU.

Plausible does not set cookies and does not store any information on your device. Your IP address is not stored. It is only used briefly, together with the user agent and a random value that changes daily and is deleted after 24 hours, to calculate an anonymous identifier. Data recorded includes the page visited, the referrer URL, browser, operating system and device type, and approximate country, region and city. It is not possible to identify individual people, and no user profiles are created.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the statistical analysis and improvement of our website. We have concluded a data processing agreement with Plausible. More information: https://plausible.io/data-policy

9. Cookies, fonts and embedded content

This website does not set cookies and does not store information on your device (e.g. in local storage).

All fonts are stored locally on our server. Loading the website does not connect to third-party servers (e.g. Google Fonts). This also applies to the demo websites under /demo/: all content is loaded from our own hosting.

10. Encryption

For security reasons, this website uses SSL/TLS encryption, for example for requests you send us through our forms. You can recognise an encrypted connection by "https://" and the lock icon in your browser's address bar.

11. Storage period

We store personal data only for as long as necessary for the respective purpose, unless stated otherwise in this policy. Data subject to statutory retention obligations (in particular under section 147 of the German Fiscal Code, e.g. offers, invoices and business correspondence) is kept for up to ten years, depending on the type of document, and then deleted.

12. Recipients of your data

We do not sell your data or use it for advertising. Your data is only received by the service providers named in this policy (Netlify, Plausible, Google), who process it on our behalf and according to our instructions, and by bodies to which we must disclose it by law (e.g. tax authorities).

13. Your rights

You have the following rights regarding your personal data. To exercise them, an informal message to the contact details in section 2 is enough.

  • Access (Art. 15 GDPR): you can ask whether and which data we process about you, for what purpose, to whom it is disclosed and how long it is stored.
  • Rectification (Art. 16 GDPR): you can ask us to correct inaccurate data or complete incomplete data.
  • Erasure (Art. 17 GDPR): you can ask us to delete your data, unless we are legally required to keep it or need it to establish, exercise or defend legal claims.
  • Restriction of processing (Art. 18 GDPR): you can ask us to restrict processing of your data, e.g. while its accuracy is being checked.
  • Data portability (Art. 20 GDPR): you can ask us to give you the data you provided in a common, machine-readable format or to transfer it to another controller.
  • Withdrawal of consent (Art. 7(3) GDPR): where processing is based on your consent, you can withdraw it at any time with effect for the future.
  • Complaint to a supervisory authority (Art. 77 GDPR): you can complain to a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de

Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then stop processing the data, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

We do not use automated decision-making, including profiling (Art. 22 GDPR).

14. Changes

We update this privacy policy when our website, our services or the law change. The version published on this page applies.

Last updated: 6 November 2026

This website sets no cookies. To understand how the site is used, we count visits anonymously with Plausible Analytics (EU, no cookies, no storage of IP addresses). More in the privacy policy.