Privacy notice · adbirdie.

1. Controller

The controller for the processing of personal data on this website is:

Ziad Amer – adbirdie
Lehrter Str. 24B
10557 Berlin
Germany

2. In short

This website sets no cookies and stores nothing on your device — no cookies, nothing in local storage or session storage. It loads no fonts, scripts or content from third-party servers; the one exception is cookieless audience measurement with Plausible (section 4). The booking calendar on the page "Book a walkthrough" is loaded from Cal.com only after you open it yourself (section 5). The form on that page sends what you type to us by email, once, when you send it (section 6). There is no customer account.

3. Serving the website

The website is served as a static site by Render Services, Inc. (USA). When you open it, the host processes the data your browser sends for technical reasons: your IP address, the date and time, the address requested, the page you came from (referrer), and your browser and operating system. This is needed to deliver the pages and to protect the website against attacks.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a secure and reliable delivery of the website. We have a data processing agreement with Render under Art. 28 GDPR.

Render's address: Render Services, Inc., 525 Brannan Street, Suite 300, San Francisco, CA 94107, USA. The data reaches the USA on the basis of the EU–U.S. Data Privacy Framework (an adequacy decision of the European Commission, Art. 45 GDPR) and, where the framework does not apply, of the EU standard contractual clauses (Art. 46 (2) (c) GDPR), both part of Render's data processing agreement. Render keeps these logs only as long as is needed to deliver the website and keep it secure; we keep no copy of them.

4. Audience measurement with Plausible Analytics

We measure the use of this website with Plausible Analytics, a service of Plausible Insights OÜ (Estonia), hosted in the EU. Plausible sets no cookies, stores nothing on your device and builds no user profiles. From your IP address and your browser identifier it derives a hash that changes daily and cannot be reversed, so visits can be counted but no person recognised; the IP address itself is not stored. What is recorded is aggregated: the pages viewed, where visitors came from (referrer and campaign parameters), country, device type and browser.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to understand which content and campaigns reach visitors.

Plausible's address: Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. The data is stored on servers in Germany and does not leave the EU. Plausible's data processing agreement under Art. 28 GDPR applies to every customer.

5. Booking a walkthrough

Our booking calendar is run by Cal.com, Inc. (USA). The page "Book a walkthrough" names the calendar and loads nothing from Cal.com until you open it: only your click on "Open the calendar" loads it into the page, and only then does your browser send a request to Cal.com — your IP address, the date and time, and your browser's identification, as any website visit does. The link "book on cal.com in a new tab" does the same on Cal.com's own site. What you enter in the calendar — your name, email address, the time you choose and any message — we process to prepare and hold the conversation. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract). Cal.com processes this data on our behalf under a data processing agreement; it is transferred to the USA.

Cal.com's address: Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Cal.com is certified under the EU–U.S. Data Privacy Framework, and the transfer rests on it (an adequacy decision of the European Commission, Art. 45 GDPR); where the framework does not apply, it rests on the EU standard contractual clauses in Cal.com's data processing agreement (Art. 46 (2) (c) GDPR). Bookings are deleted twelve months after the date of the walkthrough.

6. The form on "Book a walkthrough"

If you use the form, what you type — your name, your work email address, your agency, if you like the number of client accounts you run and a message — is sent to us once, when you click "Send", as an email to our mailbox. We use it to reply to you, and for nothing else. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and, for other enquiries, Art. 6 (1) (f) GDPR, our legitimate interest in answering. The website stores nothing of it; the message is kept in our mailbox, which is run by Google Workspace, for as long as is needed to handle your enquiry.

Two checks protect the form against automated submissions, both on our own systems: a hidden field no person fills in, and a minimum time between the page's loading and the send. No third-party service is involved.

Google Workspace is provided by Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, under Google's data processing terms (Art. 28 GDPR). Google may also process the data in the USA; that rests on the EU–U.S. Data Privacy Framework, under which Google LLC is certified (Art. 45 GDPR), and on the EU standard contractual clauses in Google's terms (Art. 46 (2) (c) GDPR). We delete an enquiry twelve months after the last message, unless it leads to a contract; correspondence that prepares or concludes a contract is kept for six years, as German commercial and tax law require (Art. 6 (1) (c) GDPR with § 257 HGB and § 147 AO).

7. Our own Meta Pixel — only with your consent

We do not use the Meta Pixel: nothing is loaded from Meta and nothing is sent to it. Should we start using it to measure our advertising on Facebook and Instagram, the site will ask for your consent before anything loads, and this section will describe what it does.

8. Contact by email

If you write to us directly, we process your message and your contact details to answer it — for enquiries about our offer under Art. 6 (1) (b) GDPR, otherwise under Art. 6 (1) (f) GDPR. Our email service is Google Workspace.

Google Workspace is described in section 6. We delete an email twelve months after the last message, unless it leads to a contract; correspondence that prepares or concludes a contract is kept for six years (Art. 6 (1) (c) GDPR with § 257 HGB and § 147 AO).

9. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR), and the right to object to processing based on legitimate interests (Art. 21 GDPR). An informal message to the address above is enough.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin

10. Version

This version: 2 November 2026.