Privacy Policy
Which data go-findyou.de processes, why it is needed and which external services may be involved.
1. Controller
Go-FindYou.de
Ronny Büchle
Wildbienenweg 2
21256 Handeloh
Deutschland
Email: info@go-findyou.de
Phone: 01792063894
2. Server operation and technical log data
Technically necessary data may be processed when the website is accessed, in particular IP address, time, requested resource, HTTP status, referrer and browser/User-Agent information. Processing serves secure and stable operation, error analysis and protection against misuse.
3. Sessions and technically necessary cookies
Server-side sessions and technically necessary cookies are used for login states, CSRF protection, form processes and other security-related functions. They are not used to create advertising profiles.
4. Contact form
When you use the contact form, we process name, email address, topic, subject and message to handle your request. The form uses CSRF protection, an invisible honeypot, time-based sending limits and server-side abuse detection. To prevent automated or mass requests, the IP address may briefly be stored as a pseudonymised hash together with technical protection features. Messages are sent via the configured email system; the form itself does not create an additional message database.
5. Website submissions
When a website is submitted, we process the website and description data you provide as well as contact person and contact email. Submission contact data is used for verification, queries and approval processes. Verification and sending status are stored for email verification.
6. Operator account and login
For operator accounts, we process in particular email address, display name, password hash, account status, email verification time and last login. Login attempts log email address, IP address, success status and time to protect accounts and the platform against abusive access.
7. Ownership verification and website transfers
Verification keys and status data are processed to assign a website securely. Agency transfers may additionally process recipient email, optional name/company, invitation status and verification data.
8. Operator profile, listing changes and Agency Center
The operator portal may process contact, company and website data, draft changes, activities and package-dependent settings. The Agency Center may additionally process customer websites, white-label branding, contacts, contact email, telephone, website address and report histories.
9. Contracts, invoices and payments
For paid packages we process contract data, package, price, billing cycle, term, renewal and cancellation data, and invoice/payment status. Invoices use company/name, address, country, billing email and, where supplied, VAT ID or tax number. Invoice and payment data may be subject to statutory retention duties.
10. Visitor statistics within go-findyou.de
For package-dependent visitor statistics, interactions with directory listings, especially impressions, detail views and website clicks, are recorded and aggregated. The purpose is statistical analysis of use within the directory, not external advertising profiles.
11. Public listing reports
Reports about a public listing may process report content, an optional contact address and technical abuse-protection data. The implementation includes an IP hash and User-Agent data.
12. Ranking measurements with DataForSEO
DataForSEO may be used for package-dependent ranking measurements. Search term, search engine and target domain or website are processed to determine positions in search results. go-findyou.de also logs technical usage, status and cost information for API calls.
13. Google Search Console
Operators may voluntarily connect their website to Google Search Console via Google OAuth. Access is read-only. Connection status, property, encrypted credentials/tokens, validity, permission scope and synchronized metrics such as clicks, impressions, CTR, average position, queries and pages are stored. Disconnecting in the operator portal removes stored credentials.
14. Google PageSpeed Insights
For PageSpeed evaluations, a website URL may be sent to the Google PageSpeed Insights API. Technical metrics are stored, including performance and Core Web Vitals for mobile and desktop, measurement time and API status.
15. Google Cloud / administrative cost control
Administrative Google Cloud billing data may be read via BigQuery for internal cost control. This serves platform administration and is separate from public website use.
16. OpenAI / AI functions
go-findyou.de uses OpenAI for selected, deliberately triggered AI functions, including editorial category assistance and package-dependent SEO evidence or drafting. Website, SEO, ranking or content data required for the task may be sent to the OpenAI API. AI suggestions are not automatically published on external customer websites.
17. Maps and location display
Location maps use deliberately triggered loading by default. The interactive OpenStreetMap map on listing pages loads only after a click, creating a connection to external map servers. Depending on central configuration, MapTiler, Mapbox or Google Maps may also be used. An external route planner is likewise opened only after active selection.
18. Email communication
Emails may be sent for verifications, approvals, rejections, password processes, invoices, contracts or agency processes. Required recipient, sender and content data are processed; technical delivery errors may be logged.
19. Storage period
Personal data is generally stored only as long as required for the purpose, contract processing, security interests or statutory retention duties. Verification, login, contract, invoice, payment and security data may have different retention periods.
20. Legal bases
Depending on the processing, legal bases include in particular Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interests in operation, security, abuse prevention and functional analysis) and, where required, Art. 6(1)(a) GDPR (consent).
21. Recipients and transfers to third countries
Where external service providers are used, data may be transferred to their systems. Depending on the function, this particularly concerns Google, DataForSEO, OpenAI and map providers. Additional safeguards may be required for providers outside the EU/EEA.
22. Your rights
Subject to statutory requirements, you have in particular rights of access, rectification, erasure, restriction of processing, data portability and objection. Consent may be withdrawn for the future. You also have the right to complain to a competent data protection supervisory authority.
23. Security
go-findyou.de uses password hashing, CSRF protection, session regeneration, email and domain verification, encrypted Search Console credentials and technical checking and logging mechanisms.
24. Updates
This privacy policy is updated when functions, services used or legal requirements change.