Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Welf GmbH
Hamburg, Germany
Email: [email protected]

Represented by: Reza Esfahanian (Managing Director)

2. Data We Collect

We may collect the following types of personal data:

• Contact Information: Name, email address when you use our contact form
• Usage Data: IP address, browser type, operating system, pages visited, time spent on pages
• Cookies: Technical and analytical cookies as described in Section 5
• Communication Data: Any information you provide when contacting us

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To improve our website and user experience
• To analyze website traffic and usage patterns
• To send marketing communications (only with your explicit consent)
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Art. 6(1)(a) GDPR): For analytics cookies and marketing communications
• Legitimate Interest (Art. 6(1)(f) GDPR): For website security and improvement
• Contract Performance (Art. 6(1)(b) GDPR): To respond to your inquiries
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with applicable laws

5. Cookies and Tracking Technologies

This website uses cookies and similar tracking technologies. We categorize them as follows:

5.1 Essential Cookies

These cookies are necessary for the website to function properly. They do not require your consent.

5.2 Analytics Cookies

We use the following analytics services (only with your consent):

• Google Analytics: We use Google Analytics 4 to understand how visitors interact with our website. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to this site. We use IP anonymization. Data may be transferred to the USA under appropriate safeguards (EU-US Data Privacy Framework).
  Google Privacy Policy

5.3 Marketing Cookies

We use the following marketing services (only with your consent):

• Meta (Facebook) Pixel: We use the Meta Pixel to measure the effectiveness of our advertising and understand actions people take on our website. This helps us deliver more relevant ads. Data may be transferred to the USA under appropriate safeguards.
  Meta Privacy Policy
• HubSpot: We use HubSpot for customer relationship management and marketing automation. HubSpot may place cookies to track your interactions with our website and communications. Data is processed in accordance with HubSpot's privacy practices.
  HubSpot Privacy Policy

6. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of Access (Art. 15): You can request a copy of your personal data
• Right to Rectification (Art. 16): You can request correction of inaccurate data
• Right to Erasure (Art. 17): You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): You can request limitation of processing
• Right to Data Portability (Art. 20): You can receive your data in a structured format
• Right to Object (Art. 21): You can object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): You can withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law. Contact form submissions are retained for up to 3 years. Analytics data is retained according to the respective service provider's policies (typically 26 months for Google Analytics).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes SSL/TLS encryption for data in transit, secure hosting infrastructure, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Some of our service providers (Google, Meta, HubSpot) are based in the United States. Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or reliance on the EU-US Data Privacy Framework for certified companies.

10. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any linked websites you visit.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Supervisory Authority

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. In Germany, you may contact the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) or the supervisory authority in your place of residence.

13. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Welf GmbH
Email: [email protected]
Website: rezaesfahanian.com