What we collect, why, and how long we keep it.

Information according to Art. 13 / 14 GDPR.

Controller
Candoro Digital GmbH
Erasmusstr. 14, 10553 Berlin
Germany
dt@candoro.com
See also the imprint.

What this site does
We do not run Google Tag Manager, advertising pixels, or a product-analytics suite on these pages. The server may write standard access logs (IP address, user agent, path, time) to operate and secure the service. Logs are kept only as long as needed for that purpose.

The SEO audit
The audit is free. If you run one we process the website URL, your email address, and the language of the page. We fetch the public pages of that URL (HTML, robots.txt, sitemap) and ask Google PageSpeed Insights for a mobile speed reading of the homepage. We send the hostname to DataForSEO to read how the domain ranks in Google in Germany, which keywords it ranks for, which other domains compete for those queries, how many sites link to it, and a short list of the domains that do. The email address is not sent there. A hidden honeypot field is used to drop bots; we do not use it as personal data. Legal basis: Art. 6(1)(b) GDPR (the audit you ask for).

Five audits a day
We store a counter for the calendar day in Europe/Berlin, keyed by a hash of the connection, so one connection can run five audits. The address itself is not stored in that counter. Legal basis: Art. 6(1)(f) GDPR (keeping the free tool within its limit).

Where the audit lives
The order and the audit are stored in Google Cloud Firestore, region europe-west1, collection versipellix_checks. The same audit is also stored under the hostname in versipellix_domains, without the email address, so each site keeps its latest audit and a short list of earlier ones. We email the audit to you through Mailjet. We keep the order, the audit, and the domain record for up to 24 months, unless a longer statutory period applies.

Payment
This site does not take payment.

Processors
Google Cloud (hosting and Firestore) and Mailjet (email) process data on our instructions. PageSpeed Insights is a Google API called with the URL you submitted. DataForSEO receives the hostname for the Google, competitor, and backlink reading. We do not sell this data and we do not use it for advertising profiles.

Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may lodge a complaint with a supervisory authority, in particular the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

No obligation to provide data
You do not have to start an audit. Without a URL and an email we cannot run it or send the audit.

Cookies
We do not set marketing cookies. A language preference cookie may be stored if you have one from an earlier visit. It is not required to start an audit.

Contact for privacy
dt@candoro.com