Data Privacy

version 1.0 - Effective date: March 6, 2026

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Stefan Weber
Pettenkoferstr. 46
80336 München
Germany

Email: info [at] seorank.tech

The controller is the natural or legal person who determines the purposes and means of the processing of personal data.

General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

Personal data includes any information relating to an identified or identifiable natural person.

Hosting and Server Log Files

This website is hosted by Webflow (SEORank Website) and Hetzner (SEORank Console).

When you visit our website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These may include:

  • IP address
  • browser type and browser version
  • operating system used
  • referrer URL
  • hostname of the accessing computer
  • time of the server request
  • pages accessed

This data is not combined with other data sources.

Legal basis

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the stable operation and security of the website.

Server log files are typically stored for 30 days and then automatically deleted unless longer retention is required for security purposes.

Consent Management

Cookiebot

This website uses the consent management platform Cookiebot provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Cookiebot enables us to obtain and document users’ consent for the use of cookies and similar technologies in compliance with the GDPR and the ePrivacy Directive.

When visiting our website, a connection to Cookiebot’s servers is established in order to store your consent preferences. Cookiebot stores a cookie in your browser to assign the given consents or their withdrawal. The collected data is stored until you request deletion, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies.

The legal basis for the use of Cookiebot is Art. 6(1)(c) GDPR (legal obligation to obtain consent) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management).

More information:
https://www.cookiebot.com

Tag Management

Google Tag Manager

This website uses Google Tag Manager provided by Google LLC.

Google Tag Manager is a tag management system that allows us to centrally manage and deploy tracking scripts and other website tags. The tool itself does not store personal data and does not carry out independent analyses.

However, the Google Tag Manager triggers other tags that may collect data. Google Tag Manager itself does not access this data.

Tag execution on this website is controlled via Google Consent Mode, ensuring that analytics or marketing tags are only activated once users have provided their consent via the consent management platform.

Further information:
https://marketingplatform.google.com/about/tag-manager/

Web Analytics

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC.

Google Analytics enables us to analyze user behavior on our website to improve our services. In this process, data such as page views, interactions, device information, and approximate location may be collected.

Legal basis

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR, which is obtained via the consent management platform.

IP anonymization

We use Google Analytics with IP anonymization enabled. This means that your IP address is shortened within the EU or EEA before transmission to the United States.

Data processing agreement

We have concluded a Data Processing Agreement (DPA) with Google.

Data transfers

Data processing may take place on servers in the United States. Transfers are safeguarded through EU Standard Contractual Clauses (SCCs).

Storage period

Data stored by Google Analytics is automatically deleted after [e.g. 14 months].

Opt-out

You can prevent Google Analytics tracking by adjusting your consent preferences or installing the browser plugin:
https://tools.google.com/dlpage/gaoptout

More information:
https://policies.google.com/privacy

Plausible Analytics

We also use Plausible Analytics, a privacy-friendly web analytics tool provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.

Plausible Analytics is designed to collect aggregated website usage statistics without using cookies and without identifying individual visitors.

The following information may be processed in anonymized form:

  • page views
  • referring websites
  • browser and device type
  • country-level location
  • approximate visit duration

Plausible does not store personal data and does not create user profiles. All analytics data is processed in aggregated form and cannot be used to identify individual users.

The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest in analyzing website usage and improving our services).

More information:
https://plausible.io/data-policy

Integration with Google Search Console

Users of our service may voluntarily connect their account with Google Search Console provided by Google LLC.

If you authorize this connection, our system will access data from the Google Search Console API associated with your verified website property. The retrieved data may include, for example:

  • search queries
  • impressions
  • clicks
  • average ranking positions
  • indexed URLs
  • page performance data

The data is processed solely for the purpose of providing analytics and reporting within our platform.

Authorization

Access to your Google Search Console data is granted through Google's OAuth authorization mechanism. This authorization can be revoked by you at any time via your Google account permissions.

Storage and deletion

Search Console data retrieved through the API is stored in our database only for as long as your user account remains active.

When a user deletes their account, all associated Search Console data stored in our systems is permanently deleted.

Legal basis

The processing of this data is based on Art. 6(1)(b) GDPR (performance of a contract), as the data is required to provide the requested service.

Contact Forms and Email Communication

If you contact us via a contact form or email, the information you provide (e.g., name, email address, message) will be stored and processed for the purpose of handling your request.

Legal basis: Art. 6(1)(b) GDPR (contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

We retain this data only as long as necessary to process your request.

User Accounts and Registration

Users may register on our website to access certain services.

During registration, personal data such as:

  • name
  • email address

may be collected and processed.

This data is used solely for the purpose of providing the user account and related services.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Users may delete their accounts at any time. Upon account deletion, all associated personal data will be removed unless legal retention obligations apply.

Security Measures

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include:

  • encrypted data transmission (HTTPS / TLS)
  • restricted access controls
  • secure server infrastructure
  • regular system monitoring

Despite these measures, complete security of data transmission on the internet cannot be guaranteed.

Data Subject Rights

Under the GDPR, you have the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restrict processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.